libzvbi up to 0.2.43 src/conv.c vbi_strndup_iconv_ucs2 src_length uninitialized pointer

Summaryinfo

A vulnerability categorized as problematic has been discovered in libzvbi up to 0.2.43. This affects the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length results in uninitialized pointer. This vulnerability is reported as CVE-2025-2173. The attack can be launched remotely. Moreover, an exploit is present. It is advisable to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

Detailsinfo

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length with an unknown input leads to a uninitialized pointer vulnerability. CWE is classifying the issue as CWE-824. The product accesses or uses a pointer that has not been initialized. This is going to have an impact on confidentiality.

The advisory is available at github.com. This vulnerability is traded as CVE-2025-2173. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details and a public exploit are known.

It is declared as proof-of-concept. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional. The vulnerability scanner Nessus provides a plugin with the ID 233205 (SUSE SLED15 / SLES15 / openSUSE 15 Security Update : zvbi (SUSE-SU-2025:0979-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.2.44 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 8def647eea27f7fd7ad33ff79c2d6d3e39948dce is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (233205). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• libzvbi

Version

• 0.2.0
• 0.2.1
• 0.2.2
• 0.2.3
• 0.2.4
• 0.2.5
• 0.2.6
• 0.2.7
• 0.2.8
• 0.2.9
• 0.2.10
• 0.2.11
• 0.2.12
• 0.2.13
• 0.2.14
• 0.2.15
• 0.2.16
• 0.2.17
• 0.2.18
• 0.2.19
• 0.2.20
• 0.2.21
• 0.2.22
• 0.2.23
• 0.2.24
• 0.2.25
• 0.2.26
• 0.2.27
• 0.2.28
• 0.2.29
• 0.2.30
• 0.2.31
• 0.2.32
• 0.2.33
• 0.2.34
• 0.2.35
• 0.2.36
• 0.2.37
• 0.2.38
• 0.2.39
• 0.2.40
• 0.2.41
• 0.2.42
• 0.2.43

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #512798: Open Source libzvbi 0.2.43 Unitinialized Heap Read (by ninpwn)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion