Yariv Nedivi

A problem has been found in the function `vbi strndup iconv ucs2` of the file src/conv.c. The manipulation of the argument `src length` leads to an integer overflow. This issue can be exploited remotely. The code maintainer was informed about the issues beforehand and reacted quickly and professionally.

A vulnerability was found in the function ` vbi strndup iconv`. The manipulation leads to integer overflow. The attack may be launched remotely.

A critical issue has been found in libzvbi, affecting the `vbi capture sim load caption` function in the src/io-sim.c file. This issue leads to an integer overflow and can be initiated remotely. The code maintainer was informed beforehand and reacted quickly and professionally.