PT-2025-10715 · Libzvbi+7 · Libzvbi+7

Ninpwn + 2 · Published 2025-03-10 · Updated 2025-10-17 · CVE-2025-2176

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libzvbi versions 0.2.43 and earlier

Description A critical issue has been found in libzvbi, affecting the vbi capture sim load caption function in the src/io-sim.c file. This issue leads to an integer overflow and can be initiated remotely. The code maintainer was informed beforehand and reacted quickly and professionally.

Recommendations For libzvbi versions 0.2.43 and earlier, update to version 0.2.44 to address this issue. As a temporary workaround, consider disabling the vbi capture sim load caption function until the update is applied.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

CWE-189

Related Identifiers

ALT-PU-2025-12980

BDU:2025-05986

CVE-2025-2176

GHSA-G7CG-7GW9-V8CF

MGASA-2025-0121

OESA-2025-1308

OPENSUSE-SU-2025:14891-1

OPENSUSE-SU-2025_0979-1

SUSE-SU-2025:0979-1

SUSE-SU-2025:0988-1

SUSE-SU-2025_0979-1

SUSE-SU-2025_0988-1

USN-7367-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Libzvbi

References · 59

• https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44 · Patch
• https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f · Patch
• https://osv.dev/vulnerability/CVE-2025-2176 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-2176 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14891-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0988-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2174 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-2176 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2175 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0121 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05986 · Security Note
• https://ubuntu.com/security/CVE-2025-2173 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-2176 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2177 · Security Note