Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d6f777d11c7b34549cdadd8578d4b85f685eb976; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 144f24ec0fc1e51673611912a6d14ded0a61db43; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 79aef69bb0903616f4867f0168aea717a11c439c; affected 0 before 6.12.111; affected 0 before 6.18.53 |
| Linux / Linux | unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.