GCVE - cpe:2.3:a:n/a:fribidi:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:fribidi:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Fribidi (`b998c732-3fab-5153-a2ad-f840106ac98e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-25310`	vulnerable	2026-06-08 05:41:45.700110	Details available A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service. Published: 2022-09-06T17:18:52.000Z Updated: 2024-08-03T04:36:06.822Z Open on db.gcve.eu Reference links https://github.com/fribidi/fribidi/issues/183 https://bugzilla.redhat.com/show_bug.cgi?id=2047923 https://github.com/fribidi/fribidi/pull/186 https://access.redhat.com/security/cve/CVE-2022-25310	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25309`	vulnerable	2026-06-08 05:41:45.699739	Details available A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service. Published: 2022-09-06T17:18:52.000Z Updated: 2024-08-03T04:36:06.823Z Open on db.gcve.eu Reference links https://github.com/fribidi/fribidi/issues/182 https://bugzilla.redhat.com/show_bug.cgi?id=2047896 https://github.com/fribidi/fribidi/commit/f22593b82b5d1668d1997dbccd10a9c31ffea3b3 https://access.redhat.com/security/cve/CVE-2022-25309	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25308`	vulnerable	2026-06-08 05:41:45.697278	Details available A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. Published: 2022-09-06T17:18:52.000Z Updated: 2024-08-03T04:36:06.972Z Open on db.gcve.eu Reference links https://github.com/fribidi/fribidi/issues/181 https://bugzilla.redhat.com/show_bug.cgi?id=2047890 https://github.com/fribidi/fribidi/pull/184 https://access.redhat.com/security/cve/CVE-2022-25308	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.