zapping-vbi CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM zapping-vbi CVE published 2026-10-14

CVE-2026-110654

libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. This vulnerability can lead to potential memory corruption and application crash. Defenders of Teletext stream processing environments using libzvbi should assess exposure and prioritize verification of vulne [truncated]