CVE-2019-18397

Summary (CVE-2019-18397) : A heap-based buffer overflow affects FriBidi up to version 1.0.7 in fribidi_get_par_embedding_levels_ex() (lib/fribidi-bidi.c). This can cause denial of service and, in some cases, arbitrary code execution when rendering crafted text with apps using FriBidi for bidirect...

CVE-2022-25308

CVE-2022-25308 affects the Fribidi library with a stack-based buffer overflow that can cause memory corruption, memory leak, or denial of service. Connected advisories document the issue across multiple distributions. Remediation requires upgrading Fribidi to fixed versions (examples: >= 1.0.1...