A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidicaprtltounicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.
{
"license": "CC-BY-4.0",
"sources": [
{
"modified": "2024-11-21T06:51:58.233Z",
"imported": "2025-10-19T19:44:23.692Z",
"published": "2022-09-06T18:15:11.493Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25309",
"id": "CVE-2022-25309",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-25309"
}
]
}