PT-2025-10702 · Libzvbi+6 · Libzvbi+6

Ninpwn + 2 · Published 2025-03-10 · Updated 2025-08-22 · CVE-2025-2175

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libzvbi versions 0.2.43 and earlier

Description A vulnerability was found in the function vbi strndup iconv. The manipulation leads to integer overflow. The attack may be launched remotely.

Recommendations For libzvbi versions 0.2.43 and earlier, upgrade to version 0.2.44 to address this issue. As a temporary workaround, consider restricting the use of the vbi strndup iconv function until the update is applied.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

CWE-189

Related Identifiers

BDU:2025-05983

CVE-2025-2175

GHSA-G7CG-7GW9-V8CF

MGASA-2025-0121

OESA-2025-1330

OESA-2025-1353

OESA-2025-1354

OESA-2025-1355

OESA-2025-2073

OPENSUSE-SU-2025:14891-1

OPENSUSE-SU-2025_0979-1

SUSE-SU-2025:0979-1

SUSE-SU-2025:0988-1

SUSE-SU-2025_0979-1

SUSE-SU-2025_0988-1

USN-7367-1

Affected Products

Astra Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Libzvbi

References · 59

• https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44 · Patch
• https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14891-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0988-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2174 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-2175 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2175 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-2175 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1353 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0121 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2173 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05983 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1330 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7367-1 · Vendor Advisory