CVE-2022-48701

ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

published May 3, 2024

CVSS
—
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and

the number of it's interfaces less than 4, an out-of-bounds read bug occurs

when parsing the interface descriptor for this device.

Fix this by checking the number of interfaces.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2024-05-03T15:12Z
EPSS history
Timeline
  • 03 MAY 15:12Z
    ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
    cvelistv5