{"id":"CVE-2022-25308","aliases":["ALPINE-CVE-2022-25308","ALSA-2022:7514","ALSA-2022:8011","AZL-10854","BELL-CVE-2022-25308","CLSA-2026-1778001915","CLSA-2026-1779215113","CLSA-2026-1792444141","DEBIAN-CVE-2022-25308","DLA-2974-1","EUVD-2022-29992","GHSA-p3q8-prqm-8535","JLSEC-2025-170","MGASA-2022-0136","OESA-2022-1923","RHSA-2022:7514","RHSA-2022:8011","RLSA-2022:7514","RLSA-2022:8011","SUSE-SU-2022:1844-1","SUSE-SU-2022:1845-1","SUSE-SU-2022:1898-1","SUSE-SU-2022:2029-1","UBUNTU-CVE-2022-25308","USN-5366-1","USN-5366-2","USN-5922-1"],"status":"published","title":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker...","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00542,"percentile":0.45811,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121","CWE-787"],"published":"2022-02-22T20:07:00Z","modified":"2026-11-03T08:00:20Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"fribidi","fixed_in":["1.0.12-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"fribidi","fixed_in":["1.0.12-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"fribidi","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"fribidi-devel","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"fribidi","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"fribidi-devel","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"fribidi","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"fribidi-devel","fixed_in":["1.0.2-1.el7_7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"fribidi","fixed_in":["1.0.8-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"fribidi","fixed_in":["1.0.8-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"fribidi","fixed_in":["1.0.8-2.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"FriBidi_jll","fixed_in":["1.0.14+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fribidi","fixed_in":["0.19.7-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"fribidi","fixed_in":["0.19.7-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"fribidi","fixed_in":["1.0.8-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"fribidi","fixed_in":["1.0.8-2ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.12-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.el7_7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.7-1+deb9u2"}]}],"versions":["0.19.7-1","0.19.7-1+deb9u1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"FriBidi_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.14+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-1.1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-2.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fribidi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fribidi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fribidi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fribidi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"fribidi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-14.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-14.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.2-14.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.6-150000.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.19.5-2","0.19.5-2ubuntu2","0.19.6-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.7-1ubuntu0.1~esm1"}]}],"versions":["0.19.7-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.7-2ubuntu0.1"}]}],"versions":["0.19.7-1","0.19.7-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2ubuntu0.1"}]}],"versions":["1.0.5-3.1","1.0.7-1","1.0.7-1.1","1.0.8-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2ubuntu3.1"}]}],"versions":["1.0.8-2ubuntu2","1.0.8-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.7-2ubuntu0.1"}]}],"versions":["0.19.7-1","0.19.7-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2ubuntu0.1"}]}],"versions":["1.0.5-3.1","1.0.7-1","1.0.7-1.1","1.0.8-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-2ubuntu3.1"}]}],"versions":["1.0.8-2ubuntu2","1.0.8-2ubuntu3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"fribidi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.7-1ubuntu0.1~esm1"}]}],"versions":["0.19.7-1"],"bundled":3}],"products":[{"vendor":"gnu","product":"fribidi"},{"vendor":"microsoft","product":"fribidi"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://github.com/fribidi/fribidi/issues/181","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047890","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/fribidi/fribidi/pull/184","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","fix","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25308","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25308","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7514","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8011","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p3q8-prqm-8535"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-25308","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25309","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25310","tags":["report"]},{"url":"https://bugzilla.redhat.com/2047890","tags":["report"]},{"url":"https://bugzilla.redhat.com/2047896","tags":["report"]},{"url":"https://bugzilla.redhat.com/2047923","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7514.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8011.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-25308","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778001915.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1779215113.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792444141.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25308.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-25308","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0136.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30249","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KXPSWMHAII3BETNRQAOH2TQ7ZPJAMEDT/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25310","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047923","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7514.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25308","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25309","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25310","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8011.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7514","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8011","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221844-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196147","tags":["report"]},{"url":"https://bugzilla.suse.com/1196148","tags":["report"]},{"url":"https://bugzilla.suse.com/1196150","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-25310","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221845-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221898-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222029-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-25308","tags":["report"]},{"url":"https://github.com/fribidi/fribidi/commit/ad3a19e6372b1e667128ed1ea2f49919884587e1","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5366-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5366-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5922-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-25309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-25310","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T17:18:52Z","modified":"2024-08-03T04:36:06.972Z","cwes":["CWE-121"],"updated_at":"2026-11-02T14:34:28.374916Z"}],"euvd":[{"id":"EUVD-2022-29992","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T17:18:52Z","modified":"2024-08-03T04:36:06Z","updated_at":"2026-11-03T03:25:47.443246Z"}],"ghsa":[{"id":"GHSA-p3q8-prqm-8535","title":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker...","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-07T00:01:53Z","modified":"2023-02-13T00:31:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T18:15:11.437Z","modified":"2026-06-17T04:33:21.92Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:07:26.802986Z"}],"osv":[{"id":"ALPINE-CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T18:15:11.437Z","modified":"2026-11-03T07:18:33.129950433Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10854","title":"CVE-2022-25308 affecting package fribidi for versions less than 1.0.12-1","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T18:15:11Z","modified":"2026-04-21T04:21:34.509289Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:01.725816Z"},{"id":"BELL-CVE-2022-25308","title":"CVE-2022-25308 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:01.321735Z","modified":"2026-01-26T09:48:07.050898Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T18:15:11.437Z","modified":"2026-11-03T08:00:20.687844826Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"JLSEC-2025-170","title":"A stack-based buffer overflow flaw was found in the Fribidi package","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2025-10-20T22:55:27.993Z","modified":"2026-07-18T00:00:53.651878801Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1923","title":"fribidi security update","description":"A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way; while the text data itself is always written in logical order and display in a different direction .\r\n\r\nSecurity Fix(es):\r\n\r\nA stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.(CVE-2022-25308)\r\n\r\nA heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the \u0026apos;--caprtl\u0026apos; option, leading to a crash and causing a denial of service.(CVE-2022-25309)\r\n\r\nA segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.(CVE-2022-25310)","status":"published","published":"2022-09-16T11:05:14Z","modified":"2026-08-18T01:17:17.138807116Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7514","title":"Red Hat Security Advisory: fribidi security update","status":"published","published":"2024-09-16T07:53:58Z","modified":"2025-12-27T10:36:35.136562Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8011","title":"Red Hat Security Advisory: fribidi security update","status":"published","published":"2024-09-16T07:54:06Z","modified":"2025-12-27T10:36:36.799173Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7514","title":"Moderate: fribidi security update","description":"FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.\n\nSecurity Fix(es):\n\n* fribidi: Stack based buffer overflow (CVE-2022-25308)\n\n* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)\n\n* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:21:42Z","modified":"2026-02-04T20:45:08.801758Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8011","title":"Moderate: fribidi security update","description":"FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.\n\nSecurity Fix(es):\n\n* fribidi: Stack based buffer overflow (CVE-2022-25308)\n\n* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)\n\n* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:13:17Z","modified":"2025-10-09T05:47:18.022002Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-02-22T20:07:00Z","modified":"2026-04-22T13:18:23.435354Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:7514","title":"Moderate: fribidi security update","description":"FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.\n\nSecurity Fix(es):\n\n* fribidi: Stack based buffer overflow (CVE-2022-25308)\n* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)\n* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:33.172114838Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8011","title":"Moderate: fribidi security update","description":"FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.\n\nSecurity Fix(es):\n\n* fribidi: Stack based buffer overflow (CVE-2022-25308)\n* fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309)\n* fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:18.977796664Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2026-1778001915","title":"fribidi: Fix of CVE-2022-25308","description":"- CVE-2022-25308: fix stack-based buffer overflow","status":"published","published":"2026-05-05T23:35:19Z","modified":"2026-06-01T00:33:18.777259634Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779215113","title":"fribidi: Fix of CVE-2022-25308","description":"- CVE-2022-25308: fix stack-based buffer overflow","status":"published","published":"2026-05-19T18:25:17Z","modified":"2026-06-01T00:33:27.479268239Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1792444141","title":"fribidi: Fix of CVE-2022-25308","description":"- CVE-2022-25308: fix stack-based buffer overflow","status":"published","published":"2026-10-19T21:09:11Z","modified":"2026-10-26T09:31:59.43553992Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CVE-2022-25308","description":"A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.","status":"published","published":"2022-09-06T17:18:52Z","modified":"2026-10-28T02:30:40.718279378Z","cwes":["CWE-121"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"DLA-2974-1","title":"fribidi - security update","status":"published","published":"2022-04-10T00:00:00Z","modified":"2026-03-09T01:19:09.181152Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2022-0136","title":"Updated fribidi packages fix security vulnerability","description":"Stack based buffer overflow. (CVE-2022-25308)\nHeap-buffer-overflow in fribidi_cap_rtl_to_unicode. (CVE-2022-25309)\nSEGV in fribidi_remove_bidi_marks. (CVE-2022-25310)\n","status":"published","published":"2022-04-09T21:20:39Z","modified":"2026-04-16T04:42:39.295076954Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"SUSE-SU-2022:1844-1","title":"Security update for fribidi","description":"This update for fribidi fixes the following issues:\n\n- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).\n- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).\n- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).\n","status":"published","published":"2022-05-25T13:44:53Z","modified":"2026-02-04T03:28:42.292963Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1845-1","title":"Security update for fribidi","description":"This update for fribidi fixes the following issues:\n\n- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).\n- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).\n- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).\n","status":"published","published":"2022-05-25T13:45:14Z","modified":"2026-02-04T04:21:14.014045Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1898-1","title":"Security update for fribidi","description":"This update for fribidi fixes the following issues:\n\n- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).\n- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).\n- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).\n","status":"published","published":"2022-05-31T16:04:04Z","modified":"2025-05-02T04:32:55.314495Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2029-1","title":"Security update for fribidi","description":"This update for fribidi fixes the following issues:\n\n- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).\n- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).\n- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).\n","status":"published","published":"2022-06-09T09:15:07Z","modified":"2026-02-04T03:27:23.840993Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5366-1","title":"fribidi vulnerabilities","description":"It was discovered that FriBidi incorrectly handled processing of input strings\nresulting in memory corruption. An attacker could use this issue to cause\nFriBidi to crash, resulting in a denial of service, or potentially execute\narbitrary code.\n(CVE-2022-25308)\n\nIt was discovered that FriBidi incorrectly validated input data to its CapRTL\nunicode encoder, resulting in memory corruption. An attacker could use this\nissue to cause FriBidi to crash, resulting in a denial of service, or\npotentially execute arbitrary code.\n(CVE-2022-25309)\n\nIt was discovered that FriBidi incorrectly handled empty input when removing\nmarks from unicode strings, resulting in a crash. An attacker could use this\nto cause FriBidi to crash, resulting in a denial of service, or potentially \nexecute arbitrary code.\n(CVE-2022-25310)\n","status":"published","published":"2022-04-07T05:12:06Z","modified":"2026-04-22T10:22:46.409713Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5366-2","title":"fribidi vulnerabilities","description":"USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the\ncorresponding updates for Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that FriBidi incorrectly handled processing of input strings\n resulting in memory corruption. An attacker could use this issue to cause\n FriBidi to crash, resulting in a denial of service, or potentially execute\n arbitrary code. (CVE-2022-25308)\n \n It was discovered that FriBidi incorrectly validated input data to its CapRTL\n unicode encoder, resulting in memory corruption. An attacker could use this\n issue to cause FriBidi to crash, resulting in a denial of service, or\n potentially execute arbitrary code. (CVE-2022-25309)\n \n It was discovered that FriBidi incorrectly handled empty input when removing\n marks from unicode strings, resulting in a crash. An attacker could use this\n to cause FriBidi to crash, resulting in a denial of service, or potentially \n execute arbitrary code. (CVE-2022-25310)\n","status":"published","published":"2022-04-27T06:40:15Z","modified":"2026-04-22T10:22:45.306116Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5922-1","title":"fribidi vulnerabilities","description":"It was discovered that FriBidi incorrectly handled the processing of input\nstrings, resulting in memory corruption. An attacker could possibly use this\nissue to cause FriBidi to crash, resulting in a denial of service, or\npotentially execute arbitrary code. (CVE-2022-25308)\n\nIt was discovered that FriBidi incorrectly validated input data to its CapRTL\nunicode encoder, resulting in memory corruption. An attacker could possibly\nuse this issue to cause FriBidi to crash, resulting in a denial of service, or\npotentially execute arbitrary code. (CVE-2022-25309)\n\nIt was discovered that FriBidi incorrectly handled empty input when removing\nmarks from unicode strings. An attacker could possibly use this to cause\nFriBidi to crash, resulting in a denial of service, or potentially execute\narbitrary code. (CVE-2022-25310)\n","status":"published","published":"2023-03-06T13:09:31Z","modified":"2026-06-25T13:31:50.122451374Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}