{"action":"Upgrade pyfribidi to 0.11.0 or later.","affected":[{"fixed":"0.11.0","introduced":"0"}],"component":"pyfribidi","cve_ids":["CVE-2012-1176"],"ecosystem":"PyPI","epss":0.02674,"exploited":false,"fixed_versions":["0.11.0"],"ghsa_id":"GHSA-6476-g47x-h3c7","id":"tcs_01M5KG5KFPGFJKEQWPYF0Y7HCP","modified_at":"2026-06-10T17:01:43.688409277Z","published_at":"2012-08-26T20:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2012-11","https://bugzilla.wikimedia.org/show_bug.cgi?id=35055","http://www.securityfocus.com/bid/52451","http://www.openwall.com/lists/oss-security/2012/03/14/4","http://www.openwall.com/lists/oss-security/2012/03/14/9","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075293.html","http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/aacd036037217998/8d095f85f3665bff?lnk=raot","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189","https://bugzilla.redhat.com/show_bug.cgi?id=801896","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076053.html","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076038.html","https://github.com/pediapress/pyfribidi/commit/d2860c655357975e7b32d84e6b45e98f0dcecd7a","https://github.com/pediapress/pyfribidi/issues/2%29:","https://exchange.xforce.ibmcloud.com/vulnerabilities/74001","https://github.com/advisories/GHSA-6476-g47x-h3c7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2012-11","url":"https://osv.dev/vulnerability/PYSEC-2012-11"}],"summary":"Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence."}