cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2022-25308,https://securityvulnerability.io/vulnerability/CVE-2022-25308,,"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.",Gnu,Fribidi,7.8,HIGH,0.0018400000408291817,false,false,false,false,,false,false,2022-09-06T17:18:52.000Z,0
CVE-2022-25310,https://securityvulnerability.io/vulnerability/CVE-2022-25310,,"A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.",Gnu,Fribidi,5.5,MEDIUM,0.001180000021122396,false,false,false,false,,false,false,2022-09-06T17:18:52.000Z,0
CVE-2022-25309,https://securityvulnerability.io/vulnerability/CVE-2022-25309,,"A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.",Gnu,Fribidi,5.5,MEDIUM,0.0013200000394135714,false,false,false,false,,false,false,2022-09-06T17:18:52.000Z,0
CVE-2019-18397,https://securityvulnerability.io/vulnerability/CVE-2019-18397,,"A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.",Gnu,Fribidi,7.8,HIGH,0.003370000049471855,false,false,false,false,,false,false,2019-11-13T13:55:35.000Z,0