CVE-2024-50180

fbdev: sisfb: Fix strbuf array overflow

High · published November 8, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fbdev: sisfb: Fix strbuf array overflow

The values of the variables xres and yres are placed in strbuf.

These variables are obtained from strbuf1.

The strbuf1 array contains digit characters

and a space if the array contains non-digit characters.

Then, when executing sprintf(strbuf, "%ux%ux8", xres, yres);

more than 16 bytes will be written to strbuf.

It is suggested to increase the size of the strbuf array to 24.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Published
2024-11-08T05:38Z
EPSS history
Timeline
  • 08 NOV 05:38Z
    fbdev: sisfb: Fix strbuf array overflow
    cvelistv5