https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:01:55.149179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7514 ALSA-2022:7514 — Moderate: fribidi security update 2026-10-08T21:01:55.161696+00:00

Affected: AlmaLinux:8: fribidi, AlmaLinux:8: fribidi-devel

FriBidi is a library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way, while the text data itself is always written in logical order.

Security Fix(es):

* fribidi: Stack based buffer overflow (CVE-2022-25308) * fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode (CVE-2022-25309) * fribidi: SEGV in fribidi_remove_bidi_marks (CVE-2022-25310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-02660 bdu:2022-02660 2026-10-08T21:01:55.161757+00:00 bdu:2022-02660 https://cve.radiocsirt.org/vuln/bell-cve-2022-25309 Withdrawn: BELL-CVE-2022-25309 — CVE-2022-25309 does not affect BellSoft software 2026-10-08T21:01:55.161774+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-08T21:01:55.161789+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-14490 EUVD-2026-14490 2026-10-08T21:01:55.161802+00:00 EUVD-2026-14490 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25309 fkie_cve-2022-25309 2026-10-08T21:01:55.161812+00:00

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-4fjx-j6jj-8pm5 GHSA-4fjx-j6jj-8pm5 2026-10-08T21:01:55.161834+00:00

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2022-25309 gsd-2022-25309 2026-10-08T21:01:55.161848+00:00 gsd-2022-25309 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25309 msrc_CVE-2022-25309 — A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio… 2026-10-08T21:01:55.161858+00:00 msrc_CVE-2022-25309 https://cve.radiocsirt.org/vuln/oesa-2022-1923 OESA-2022-1923 — fribidi security update 2026-10-08T21:01:55.161873+00:00

Affected: openEuler:20.03-LTS-SP1: fribidi, openEuler:20.03-LTS-SP3: fribidi, openEuler:22.03-LTS: fribidi

A library to handle bidirectional scripts (for example Hebrew, Arabic), so that the display is done in the proper way; while the text data itself is always written in logical order and display in a different direction . Security Fix(es): A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.(CVE-2022-25308) A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.(CVE-2022-25309) A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.(CVE-2022-25310)

 https://cve.radiocsirt.org/vuln/rhsa-2022:7514 RHSA-2022:7514 — Red Hat Security Advisory: fribidi security update 2026-10-08T21:01:55.161902+00:00

fribidi: Stack based buffer overflow fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode fribidi: SEGV in fribidi_remove_bidi_marks

 https://cve.radiocsirt.org/vuln/suse-su-2022:1844-1 SUSE-SU-2022:1844-1 — Security update for fribidi 2026-10-08T21:01:55.161920+00:00

Security update for fribidi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25309 UBUNTU-CVE-2022-25309 2026-10-08T21:01:55.161933+00:00

Affected: Ubuntu:14.04:LTS: fribidi, Ubuntu:Pro:16.04:LTS: fribidi, Ubuntu:18.04:LTS: fribidi, Ubuntu:20.04:LTS: fribidi, Ubuntu:22.04:LTS: fribidi

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2044 WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-08T21:01:55.161957+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.