Description
A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| alexpasmantier | television | 0.15.0, 0.15.1, 0.15.2, 0.15.3, 0.15.4, 0.15.5, 0.15.6, 0.15.7, 0.15.8, 0.15.9 | — |
References
- VDB-421588 | alexpasmantier television entry.rs output command injection vdb-entry technical-description
- VDB-421588 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-111876 | CVE Analysis and Report third-party-advisory
- Submit #1005368 | https://github.com/alexpasmantier/ television commit 9d2925b Command Injection third-party-advisory
- https://github.com/alexpasmantier/television/issues/1124 issue-tracking
- https://github.com/alexpasmantier/television/pull/1125 issue-tracking patch
- https://github.com/alexpasmantier/television/ product