USN-5366-1

Dashboard / Vulnerabilities / USN-5366-1

USN-5366-1

Summary: fribidi vulnerabilities

Details: It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25308) It was discovered that FriBidi incorrectly validated input data to its CapRTL unicode encoder, resulting in memory corruption. An attacker could use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25309) It was discovered that FriBidi incorrectly handled empty input when removing marks from unicode strings, resulting in a crash. An attacker could use this to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (CVE-2022-25310)

References: https://ubuntu.com/security/notices/USN-5366-1, https://ubuntu.com/security/CVE-2022-25308, https://ubuntu.com/security/CVE-2022-25309, https://ubuntu.com/security/CVE-2022-25310