Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 17:53:33 +0000 CVE-2026-110654 — libzvbi through 0.2.45 Out-of-Bounds Write via Teletext DRCS convert_drcs https://db.gcve.eu/vuln/cve-2026-110654 <p><strong>Affected:</strong> zapping-vbi libzvbi</p> <p>libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to DRCS_MODE_6_5_4, causing convert_drcs to overflow chars[48][60] and crash the application.</p> <p><strong>Affected:</strong> zapping-vbi libzvbi</p> <p>libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to DRCS_MODE_6_5_4, causing convert_drcs to overflow chars[48][60] and crash the application.</p> https://db.gcve.eu/vuln/cve-2026-110654