CVE-2024-50007

ALSA: asihpi: Fix potential OOB array access

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: asihpi: Fix potential OOB array access

ASIHPI driver stores some values in the static array upon a response

from the driver, and its index depends on the firmware. We shouldn't

trust it blindly.

This patch adds a sanity check of the array index to fit in the array

size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Published
2024-10-21T18:54Z
EPSS history
Timeline
  • 21 OCT 18:54Z
    ALSA: asihpi: Fix potential OOB array access
    cvelistv5