CVE-2023-52565CWE-125

CVE-2023-52565

High · published March 3, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Fix OOB read

If the index provided by the user is bigger than the mask size, we might do

an out of bound read.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-03-03T03:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.16, < 6.1.566.1.56
linux/linux_kernel≥ 6.3, < 6.5.66.5.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/09635bf4cdd4adf2160198a6041bcc7ca46c0558 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8bcf70d787f7d53a3b85ad394f926cfef3eed023 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/09635bf4cdd4adf2160198a6041bcc7ca46c0558 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8bcf70d787f7d53a3b85ad394f926cfef3eed023 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 MAR 21:59Z
    media: uvcvideo: Fix OOB read
    cvelistv5