https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2177.htmlhttps://patchthecve.com/cve/CVE-2025-2177.htmlWed, 17 Jun 2026 09:06:28 +0000HIGH 7.3: A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the phttps://patchthecve.com/cve/CVE-2025-2176.htmlhttps://patchthecve.com/cve/CVE-2025-2176.htmlWed, 17 Jun 2026 09:06:28 +0000HIGH 7.3: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2025-2175.htmlhttps://patchthecve.com/cve/CVE-2025-2175.htmlWed, 17 Jun 2026 09:06:28 +0000MEDIUM 4.3: A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to https://patchthecve.com/cve/CVE-2025-2174.htmlhttps://patchthecve.com/cve/CVE-2025-2174.htmlWed, 17 Jun 2026 09:06:28 +0000MEDIUM 5.3: A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2025-2173.htmlhttps://patchthecve.com/cve/CVE-2025-2173.htmlWed, 17 Jun 2026 09:06:27 +0000MEDIUM 5.3: A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has