Skip to content
Fedora zvbi Update Addresses Teletext Decoder Vulnerability

Fedora zvbi Update Addresses Teletext Decoder Vulnerability

First seen 3 Nov 2026, 17:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC
  • •Two vulnerabilities in zvbi library fixed in Fedora update.
  • •CVE-2026-11065 is rated critical with CVSS 9.6.
  • •Users are urged to upgrade to version 0.2.46 immediately.

A recent update to the zvbi library in Fedora has addressed two vulnerabilities, CVE-2026-11065 and CVE-2026-110654, which could allow attackers to execute code without authentication. CVE-2026-11065, rated with a CVSS of 9.6, was published on June 4, 2026, while CVE-2026-110654, rated medium with a CVSS of 6.9, was published on October 14, 2026. The vulnerabilities stem from out-of-bounds write issues in the Teletext decoder, potentially leading to denial of service. Users of Fedora 44 and earlier versions are advised to upgrade to version 0.2.46 to mitigate these risks. The update was released on November 3, 2026, and can be installed using the 'dnf' update program. The vulnerabilities primarily affect systems utilizing the zvbi library for handling VBI data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-04
CVE-2026-11065 published
A critical vulnerability in the zvbi library was disclosed, allowing code execution without authentication.
Linuxsecurity
2026-10-14
CVE-2026-110654 published
A medium severity vulnerability in the zvbi library was disclosed, related to out-of-bounds writes.
Linuxsecurity
2026-11-03
Fedora zvbi update released
Fedora released version 0.2.46 to fix the identified vulnerabilities in the zvbi library.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2026-11065 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which Fedora versions are affected?
Fedora 44 and earlier versions using the zvbi library are affected.
What is the severity of the vulnerabilities?
CVE-2026-11065 is critical with a CVSS of 9.6, while CVE-2026-110654 is medium with a CVSS of 6.9.
How can I protect my system?
Upgrade to zvbi version 0.2.46 using the 'dnf' update program to mitigate the vulnerabilities.