CVE-2025-2175

Name of the Vulnerable Software and Affected Versions libzvbi versions 0.2.43 and earlier

Description A vulnerability was found in the function vbi strndup iconv. The manipulation leads to integer overflow. The attack may be launched remotely.

Recommendations For libzvbi versions 0.2.43 and earlier, upgrade to version 0.2.44 to address this issue. As a temporary workaround, consider restricting the use of the vbi strndup iconv function until the update is applied.