PT-2022-2352

CVE-2022-25309

·

Published

2021-12-22

·

Updated

2025-10-20

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Fribidi (affected versions not specified)
Description A heap-based buffer overflow flaw was found in the Fribidi package, affecting the fribidi cap rtl to unicode() function. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service. The exploitation of this flaw may also allow a remote attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2022:7514
ALSA-2022:8011
ALT-PU-2022-1728
ALT-PU-2022-1742
AZL-10887
CESA-2022_7514
DLA-2974-1
INFSA-2022_8011
JLSEC-2025-171
MGASA-2022-0136
OESA-2022-1923
OPENSUSE-SU-2022_1844-1
OPENSUSE-SU-2022_1898-1
RHSA-2022:7514
RHSA-2022_7514
RHSA-2022:8011
RHSA-2022_8011
RLSA-2022:7514
RLSA-2022:8011
SUSE-SU-2022:1844-1
SUSE-SU-2022:1845-1
SUSE-SU-2022:1898-1
SUSE-SU-2022:2029-1
USN-5366-1
USN-5366-2
USN-5922-1
Found an issue in the description? Have something to add? Feel free to write us 👾