CVE-2025-2174

CVE-2025-2174 affects libzvbi up to 0.2.43. The vulnerability is in vbi_strndup_iconv_ucs2 (src/conv.c); manipulating src_length can trigger an integer overflow, with remote attack possibilities. Public exploit guidance exists. A fix is available in 0.2.44, and the patch ca1672134b3e2962cd392212c...