{"metadata": {"vulnerability": "CVE-2025-2173", "count": 44, "kinds": {"milestone": 12, "sighting": 3, "kev": 0, "other": 29}}, "data": [{"timestamp": "2025-03-10T17:26:53.636Z", "date_only": false, "value": "2025-03-10T17:26:53.636Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-2173", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2025-03-11T01:00:00Z", "date_only": false, "value": "2025-03-11T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-2173", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2025-2173", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-11T07:15:00Z", "date_only": false, "value": "2025-03-11T07:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-2173", "record": "UBUNTU-CVE-2025-2173", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-11T07:15:36.057Z", "date_only": false, "value": "2025-03-11T07:15:36.057", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2173", "record": "FKIE_CVE-2025-2173", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-11T07:18:06Z", "date_only": false, "value": "2025-03-11T07:18:06.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-2173", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2025-03-11T07:39:47Z", "date_only": false, "value": "2025-03-11T07:39:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7116", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "60306fbc-bb8f-4102-b722-3cf9333cc1cd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2173\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.\n\ud83d\udccf Published: 2025-03-11T06:31:05.166Z\n\ud83d\udccf Modified: 2025-03-11T06:31:05.166Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299202\n2. https://vuldb.com/?ctiid.299202\n3. https://vuldb.com/?submit.512798\n4. https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf\n5. https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce\n6. https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44", "url": "https://t.me/DarkWebInformer_CVEAlerts/7116", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-11T09:15:42Z", "date_only": false, "value": "2025-03-11T09:15:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20037", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "5cb1c05e-7539-474f-bac3-51865d648b76", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2173 - Libzvbi Uninitialized Pointer Remote Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2173 \nPublished : March 11, 2025, 7:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20037"}, {"timestamp": "2025-03-11T10:05:40.265Z", "date_only": false, "value": "2025-03-11T10:05:40.265663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3sxleyjo24", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "c518e021-481c-4776-b389-09e3a99d5deb", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3sxleyjo24"}, {"timestamp": "2025-03-11T13:46:53.127Z", "date_only": false, "value": "2025-03-11T13:46:53.127947Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2173", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-11T13:46:53.127Z", "date_only": false, "value": "2025-03-11T13:46:53.127947Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2173", "record": "FKIE_CVE-2025-2173", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-11T13:47:03.081Z", "date_only": false, "value": "2025-03-11T13:47:03.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-11T13:47:03.081Z", "date_only": false, "value": "2025-03-11T13:47:03.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2173", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-21T12:54:02Z", "date_only": false, "value": "2025-03-21T12:54:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0979-1", "record": "SUSE-SU-2025:0979-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-21T12:54:02Z", "date_only": false, "value": "2025-03-21T12:54:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0979-1", "record": "SUSE-SU-2025:0979-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-21T12:54:02Z", "date_only": false, "value": "2025-03-21T12:54:02Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0979-1", "record": "SUSE-SU-2025:0979-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-21T12:54:02Z", "date_only": false, "value": "2025-03-21T12:54:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0979-1", "record": "SUSE-SU-2025:0979-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-21T12:54:02Z", "date_only": false, "value": "2025-03-21T12:54:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0979-1", "record": "SUSE-SU-2025:0979-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-03-24T09:32:22Z", "date_only": false, "value": "2025-03-24T09:32:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-24T09:32:22Z", "date_only": false, "value": "2025-03-24T09:32:22Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-24T09:32:22Z", "date_only": false, "value": "2025-03-24T09:32:22Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-03-24T09:32:22Z", "date_only": false, "value": "2025-03-24T09:32:22Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-29T11:08:25Z", "date_only": false, "value": "2025-03-29T11:08:25Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2025-1329", "record": "OESA-2025-1329", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-29T11:08:25Z", "date_only": false, "value": "2025-03-29T11:08:25Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2025-1330", "record": "OESA-2025-1330", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-29T11:08:25Z", "date_only": false, "value": "2025-03-29T11:08:25Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2025-1331", "record": "OESA-2025-1331", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-29T11:08:25Z", "date_only": false, "value": "2025-03-29T11:08:25Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2025-1332", "record": "OESA-2025-1332", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-03T11:08:27Z", "date_only": false, "value": "2025-04-03T11:08:27Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2025-1353", "record": "OESA-2025-1353", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-22T07:53:17Z", "date_only": false, "value": "2026-04-22T07:53:17Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-2173", "record": "UBUNTU-CVE-2025-2173", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T09:06:27.923Z", "date_only": false, "value": "2026-06-17T09:06:27.923", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2173", "record": "FKIE_CVE-2025-2173", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-06T11:08:25Z", "date_only": false, "value": "2026-08-06T11:08:25Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2025-1329", "record": "OESA-2025-1329", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-06T11:08:25Z", "date_only": false, "value": "2026-08-06T11:08:25Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2025-1330", "record": "OESA-2025-1330", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-06T11:08:25Z", "date_only": false, "value": "2026-08-06T11:08:25Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2025-1331", "record": "OESA-2025-1331", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-06T11:08:25Z", "date_only": false, "value": "2026-08-06T11:08:25Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2025-1332", "record": "OESA-2025-1332", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-06T11:08:27Z", "date_only": false, "value": "2026-08-06T11:08:27Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2025-1353", "record": "OESA-2025-1353", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-20T17:59:53Z", "date_only": false, "value": "2026-09-20T17:59:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T17:59:53Z", "date_only": false, "value": "2026-09-20T17:59:53Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0988-1", "record": "SUSE-SU-2025:0988-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:29:14Z", "date_only": false, "value": "2026-09-20T21:29:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:29:14Z", "date_only": false, "value": "2026-09-20T21:29:14Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14891-1", "record": "OPENSUSE-SU-2025:14891-1", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-08T08:16:05.844Z", "anchors": {"origin": {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-11T07:39:47Z", "date_only": false, "value": "2025-03-11T07:39:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7116", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "60306fbc-bb8f-4102-b722-3cf9333cc1cd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2173\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.\n\ud83d\udccf Published: 2025-03-11T06:31:05.166Z\n\ud83d\udccf Modified: 2025-03-11T06:31:05.166Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299202\n2. https://vuldb.com/?ctiid.299202\n3. https://vuldb.com/?submit.512798\n4. https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf\n5. https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce\n6. https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44", "url": "https://t.me/DarkWebInformer_CVEAlerts/7116", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 4121.834, "hours": 1.1449538888888888, "days": 0.04770641203703704, "min_seconds": 4121.834, "max_seconds": 4121.834, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-11T07:39:47Z", "date_only": false, "value": "2025-03-11T07:39:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7116", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "60306fbc-bb8f-4102-b722-3cf9333cc1cd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2173\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.\n\ud83d\udccf Published: 2025-03-11T06:31:05.166Z\n\ud83d\udccf Modified: 2025-03-11T06:31:05.166Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299202\n2. https://vuldb.com/?ctiid.299202\n3. https://vuldb.com/?submit.512798\n4. https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf\n5. https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce\n6. https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44", "url": "https://t.me/DarkWebInformer_CVEAlerts/7116", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 52451100.678128, "hours": 14569.750188368887, "days": 607.0729245153703, "min_seconds": 52451100.678128, "max_seconds": 52451100.678128, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-11T06:31:05.166Z", "date_only": false, "value": "2025-03-11T06:31:05.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2173", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T08:16:05.844Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 52446978.844128, "hours": 14568.60523448, "days": 607.0252181033333, "min_seconds": 52446978.844128, "max_seconds": 52446978.844128, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-11T07:39:47Z", "date_only": false, "value": "2025-03-11T07:39:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7116", "record": "CVE-2025-2173", "field": "creation_timestamp", "uuid": "60306fbc-bb8f-4102-b722-3cf9333cc1cd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2173\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.\n\ud83d\udccf Published: 2025-03-11T06:31:05.166Z\n\ud83d\udccf Modified: 2025-03-11T06:31:05.166Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299202\n2. https://vuldb.com/?ctiid.299202\n3. https://vuldb.com/?submit.512798\n4. https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf\n5. https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce\n6. https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44", "url": "https://t.me/DarkWebInformer_CVEAlerts/7116", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T08:16:05.844Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}