FriBidi vulnerabilities

2023-03-0600:00:00

ubuntu.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

Releases

Ubuntu 16.04 ESM

Packages

fribidi - Free Implementation of the Unicode BiDi algorithm (utility)

Details

It was discovered that FriBidi incorrectly handled the processing of input
strings, resulting in memory corruption. An attacker could possibly use this
issue to cause FriBidi to crash, resulting in a denial of service, or
potentially execute arbitrary code. (CVE-2022-25308)

It was discovered that FriBidi incorrectly validated input data to its CapRTL
unicode encoder, resulting in memory corruption. An attacker could possibly
use this issue to cause FriBidi to crash, resulting in a denial of service, or
potentially execute arbitrary code. (CVE-2022-25309)

It was discovered that FriBidi incorrectly handled empty input when removing
marks from unicode strings. An attacker could possibly use this to cause
FriBidi to crash, resulting in a denial of service, or potentially execute
arbitrary code. (CVE-2022-25310)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibfribidi-bin< 0.19.7-1ubuntu0.1~esm1UNKNOWN
Ubuntu16.04noarchlibfribidi-bin< 0.19.7-1UNKNOWN
Ubuntu16.04noarchlibfribidi-dev< 0.19.7-1UNKNOWN
Ubuntu16.04noarchlibfribidi0< 0.19.7-1UNKNOWN
Ubuntu16.04noarchlibfribidi0-udeb< 0.19.7-1UNKNOWN
Ubuntu16.04noarchlibfribidi0< 0.19.7-1ubuntu0.1~esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	16.04	noarch	libfribidi-bin	< 0.19.7-1ubuntu0.1~esm1	UNKNOWN
Ubuntu	16.04	noarch	libfribidi-bin	< 0.19.7-1	UNKNOWN
Ubuntu	16.04	noarch	libfribidi-dev	< 0.19.7-1	UNKNOWN
Ubuntu	16.04	noarch	libfribidi0	< 0.19.7-1	UNKNOWN
Ubuntu	16.04	noarch	libfribidi0-udeb	< 0.19.7-1	UNKNOWN
Ubuntu	16.04	noarch	libfribidi0	< 0.19.7-1ubuntu0.1~esm1	UNKNOWN