CVE-2022-25310

CVE-2022-25310 is a segmentation fault (SEGV) in Fribidi’s fribidi_remove_bidi_marks() (lib/fribidi.c) that can crash Fribidi and cause a denial of service when processing crafted input. Connected advisories corroborate a vulnerability in Fribidi and indicate affected versions prior to fixed rele...

CVE-2022-25309

The CVE-2022-25309 issue is a heap-based buffer overflow in FriBidi affecting fribidi_cap_rtl_to_unicode() (fribidi-char-sets-cap-rtl.c). Exploitation requires a crafted input with the --caprtl option, enabling crash/Denial of Service (local access). Public advisories confirm fixes in Fribidi pac...