CVE-2025-23159

media: venus: hfi: add a check to handle OOB in sfr region

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: venus: hfi: add a check to handle OOB in sfr region

sfr->buf_size is in shared memory and can be modified by malicious user.

OOB write is possible when the size is made higher than actual sfr data

buffer. Cap the size to allocated size for such cases.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.8th percentile
Published
2025-05-01T12:55Z
EPSS history
Timeline
  • 01 MAY 12:55Z
    media: venus: hfi: add a check to handle OOB in sfr region
    cvelistv5