QwikSec

Security Database

CVE

CWE

Training

CVE-2022-25310

Published: Sep 6, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.

Vendor	Product	Versions
n/a	fribidi	affected `Fixed in v1.0.12`

Weaknesses (CWE)

References

https://github.com/fribidi/fribidi/issues/183

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=2047923

x_refsource_MISC

https://github.com/fribidi/fribidi/pull/186

x_refsource_MISC

https://access.redhat.com/security/cve/CVE-2022-25310

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.