OESA-2026-4693

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4693
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-4693.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-4693
Upstream
Published
2026-11-04T13:54:33Z
Modified
2026-11-04T14:00:05Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
zvbi security update
Details

The ZVBI library provides functions to read from Linux V4L, V4L2 and FreeBSD BKTR raw VBI capture devices, from Linux DVB devices and from a VBI proxy to share V4L and V4L2 VBI devices between multiple applications. It can demodulate raw to sliced VBI data in software, with support for a wide range of formats, has functions to decode several popular services including Teletext and Closed Caption, a Teletext cache with search function, various text export and rendering functions.

Security Fix(es):

libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to DRCS_MODE_6_5_4, causing convert_drcs to overflow chars[48][60] and crash the application.(CVE-2026-110654)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP3 / zvbi

Package

Name
zvbi
Purl
pkg:rpm/openEuler/zvbi&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.44-3.oe2403sp3

Ecosystem specific 

{
    "aarch64": [
        "zvbi-0.2.44-3.oe2403sp3.aarch64.rpm",
        "zvbi-debuginfo-0.2.44-3.oe2403sp3.aarch64.rpm",
        "zvbi-debugsource-0.2.44-3.oe2403sp3.aarch64.rpm",
        "zvbi-devel-0.2.44-3.oe2403sp3.aarch64.rpm",
        "zvbi-help-0.2.44-3.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "zvbi-0.2.44-3.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "zvbi-0.2.44-3.oe2403sp3.x86_64.rpm",
        "zvbi-debuginfo-0.2.44-3.oe2403sp3.x86_64.rpm",
        "zvbi-debugsource-0.2.44-3.oe2403sp3.x86_64.rpm",
        "zvbi-devel-0.2.44-3.oe2403sp3.x86_64.rpm",
        "zvbi-help-0.2.44-3.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-4693.json"