A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option leading to a crash and causing a denial of service.

🗓️ 10 Sep 2022 07:00:00Reported by MicrosoftType

Heap overflow in Fribidi affects fribidi_cap_rtl_to_unicode, enabling denial of service via crafted files with --caprtl.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to arbitrary code execution due to CVE-2022-25309	1 Dec 202217:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
ATTACKERKB	CVE-2022-25309	6 Sep 202218:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : fribidi, fribidi-devel (ALAS2022-2022-091)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : fribidi, fribidi-devel (ALAS2022-2022-200)	4 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : fribidi, fribidi-devel (ALAS2023-2023-069)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : fribidi (ALAS-2023-2054)	5 Jun 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : fribidi (ALSA-2022:7514)	14 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : fribidi (ALSA-2022:8011)	19 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 8 : fribidi (CESA-2022:7514)	9 Nov 202200:00	–	nessus