Skip to content
OpenAdvisories
High DLA-4449-1 5 CVEs

zvbi - security update

Published Jan 24, 2026 · Updated Jan 24, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 zvbi 0.2.35-18+deb11u1

Vulnerabilities 5

  • High 7.3

    libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow

    A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exp…

  • High 7.3

    libzvbi search.c vbi_search_new integer overflow

    A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely…

  • Medium 5.3

    libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer

    A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to lau…

  • Medium 5.3

    libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow

    A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The at…

  • Medium 4.3

    libzvbi _vbi_strndup_iconv integer overflow

    A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to …