CVE-2025-2176 is a critical integer overflow vulnerability in the vbi_capture_sim_load_caption function of libzvbi versions up to 0.2.43, affecting products like zapping_vbi and zvbi. This remotely exploitable vulnerability has a CVSS score of 7.5 (High), indicating a high impact on availability with no user interaction required. While a public exploit has been disclosed, there is currently no evidence of active exploitation, nor are there Metasploit or Nuclei modules available. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.2.44CPE matchmatch criteria | cpe:2.3:a:zapping-vbi:zvbi:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.