AZL-10887

Dashboard / Vulnerabilities / AZL-10887

AZL-10887

Summary: CVE-2022-25309 affecting package fribidi for versions less than 1.0.12-1

Details: A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.

References: https://nvd.nist.gov/vuln/detail/CVE-2022-25309