CVE-2022-25309

Name	CVE-2022-25309
Description	A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2974-1
Debian Bugs	1008793

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
fribidi (PTS)	buster	1.0.5-3.1+deb10u2	fixed
	buster (security)	1.0.5-3.1+deb10u1	vulnerable
	bullseye	1.0.8-2+deb11u1	fixed
	bookworm	1.0.8-2.1	fixed
	sid, trixie	1.0.13-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
fribidi	source	stretch	0.19.7-1+deb9u2	DLA-2974-1
fribidi	source	buster	1.0.5-3.1+deb10u2
fribidi	source	bullseye	1.0.8-2+deb11u1
fribidi	source	(unstable)	1.0.8-2.1		1008793

Notes

https://github.com/fribidi/fribidi/issues/182
https://github.com/fribidi/fribidi/pull/185
https://github.com/fribidi/fribidi/commit/f22593b82b5d1668d1997dbccd10a9c31ffea3b3