CVE-2024-50288CWE-787

CVE-2024-50288

High · published November 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: vivid: fix buffer overwrite when using > 32 buffers

The maximum number of buffers that can be requested was increased to

64 for the video capture queue. But video capture used a must_blank

array that was still sized for 32 (VIDEO_MAX_FRAME). This caused an

out-of-bounds write when using buffer indices >= 32.

Create a new define MAX_VID_CAP_BUFFERS that is used to access the

must_blank array and set max_num_buffers for the video capture queue.

This solves a crash reported by:

https://bugzilla.kernel.org/show_bug.cgi?id=219258

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-11-19T07:16Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.11.86.11.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 19 NOV 01:30Z
    media: vivid: fix buffer overwrite when using > 32 buffers
    cvelistv5