Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:fribidi:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Fribidi (e632d682-7fe8-5b39-8639-849762a31ebf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/fribidi |
purl2cpe | 2026-06-01 10:11:53.622498 |
pkg:deb/ubuntu/fribidi |
purl2cpe | 2026-06-01 10:11:53.622501 |
pkg:github/fribidi/fribidi |
purl2cpe | 2026-06-01 10:11:53.622504 |
pkg:rpm/centos/fribidi |
purl2cpe | 2026-06-01 10:11:53.622507 |
pkg:rpm/fedora/fribidi |
purl2cpe | 2026-06-01 10:11:53.622510 |
pkg:rpm/opensuse/fribidi |
purl2cpe | 2026-06-01 10:11:53.622512 |
pkg:sourceforge/fribidi |
purl2cpe | 2026-06-01 10:11:53.622515 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25310 |
vulnerable | 2026-06-08 05:41:45.700251 |
Details available
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
Published: 2022-09-06T17:18:52.000Z
Updated: 2024-08-03T04:36:06.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25309 |
vulnerable | 2026-06-08 05:41:45.699779 |
Details available
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.
Published: 2022-09-06T17:18:52.000Z
Updated: 2024-08-03T04:36:06.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25308 |
vulnerable | 2026-06-08 05:41:45.698087 |
Details available
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
Published: 2022-09-06T17:18:52.000Z
Updated: 2024-08-03T04:36:06.972Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18397 |
vulnerable | 2026-06-08 05:13:11.492044 |
Details available
A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.
Published: 2019-11-13T13:55:35.000Z
Updated: 2024-08-05T01:54:14.298Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.