CVE-2026-110654Published
libzvbi through 0.2.45 Out-of-Bounds Write via Teletext DRCS convert_drcs
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110654 · Microsoft / collected KEV context
cve-program · CVE-2026-110654
- https://hackmd.io/@haind-pwn/zvbi-teletext-drcs-mode-oob-write
- https://github.com/zapping-vbi/zvbi/blob/d3a5ee9f2b047bf16cd1ee5ccf6ec05ee75409d0/src/packet.c#L447
- https://github.com/zapping-vbi/zvbi
- https://www.vulncheck.com/advisories/libzvbi-through-0.2.45-out-of-bounds-write-via-teletext-drcs-convert-drcs
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.