How severe is CVE-2025-2175?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.3 out of 10.

What type of vulnerability is CVE-2025-2175?

This is classified as CWE-189, which is a common weakness in software security.

CVE-2025-2175 - MEDIUM Severity | CVSS 4.3

Vulnerability Description

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

Related Vulnerabilities

CVE-2016-5224

MEDIUM

CVSS:4.3(Medium)

A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attac...

CWE-1892016

CVE-2015-3223

MEDIUM

CVSS:5.3(Medium)

The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero val...

CWE-1892015

CVE-2025-2174

MEDIUM

CVSS:5.3(Medium)

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation o...

CWE-1892025

CVE-2025-5001

MEDIUM

CVSS:3.3(Low)

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The mani...

CWE-1892025

CVE-2014-9915

MEDIUM

CVSS:5.5(Medium)

Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile.

CWE-1892014

CVE-2016-5241

MEDIUM

CVSS:5.5(Medium)

magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file.

CWE-1892016