Lucene search
K

12 matches found

OSV
OSV
added 2025/10/20 10:55 p.m.3 views

JLSEC-2025-169 A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU...

A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application...

7.8CVSS8.2AI score0.02182EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:7 a.m.2 views

SUSE CVE-2019-18397

A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application...

7.8CVSS8.2AI score0.02182EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.3 views

The vulnerability of the fribidi_get_par_embedding_levels_ex() function (lib/fribidi-bidi.c) in the GNU FriBidi library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the fribidigetparembeddinglevelsex function lib/fribidi-bidi.c in the GNU FriBidi library is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

7.8CVSS7.8AI score0.02182EPSS
Exploits0References10Affected Software5
RedHat Linux
RedHat Linux
added 2020/01/30 9:4 a.m.4 views

fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial of service and possible code execution

A heap-based buffer overflow vulnerability was found in GNU FriBidi, an implementation of the Unicode Bidirectional Algorithm bidi. When the flaw is triggered it's possible to manipulate the heap contents, leading to memory corruption causing a denial of service and to arbitrary code execution. T...

7.8CVSS7.7AI score0.02182EPSS
Exploits0References4
OSV
OSV
added 2019/11/13 2:15 p.m.2 views

DEBIAN-CVE-2019-18397

A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application...

7.8CVSS8.4AI score0.02182EPSS
Exploits0References1
CNVD
CNVD
added 2019/11/08 12:0 a.m.1 views

fribidi Buffer Overflow Vulnerability

fribidi is an open source implementation of a bi-directional Unicode algorithm. A buffer overflow vulnerability exists in the 'fribidigetparembeddinglevelsex' function in the lib/fribidi-bidi.c file in fribidi versions 1.0.0 through 1.0.7, which can be exploited by an attacker to to cause a buffe...

7.8CVSS7.3AI score0.02182EPSS
Exploits0References1
OSV
OSV
added 2019/11/07 5:0 p.m.1 views

UBUNTU-CVE-2019-18397

A buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application...

7.8CVSS7.6AI score0.02182EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2019/10/29 2:13 p.m.3 views

pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability...

9.8CVSS7.6AI score0.06274EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2019/08/28 5:53 p.m.1 views

pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability...

9.8CVSS7.6AI score0.06274EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.3 views

The vulnerability of the pango_log2vis_get_embedding_levels function in the Pango library allows a hacker to execute arbitrary code.

The vulnerability of the pangolog2visgetembeddinglevels function in the Pango library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.06274EPSS
Exploits1References9Affected Software7
CNVD
CNVD
added 2019/07/22 12:0 a.m.2 views

Gnome Pango Buffer Overflow Vulnerability

Pango is an internationalized text layout and rendering library. A heap buffer overflow vulnerability exists in the pangolog2visgetembeddinglevels function in Gnome Pango 1.42 and later, which can be exploited by an attacker to execute code...

9.8CVSS9.9AI score0.06274EPSS
Exploits1References1
OSV
OSV
added 2019/07/19 5:15 p.m.1 views

ALPINE-CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when...

9.8CVSS8.1AI score0.06274EPSS
Exploits1References1
Rows per page
Query Builder