CVE-2026-97579

CVE-2026-97579

High · published September 25, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries

into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound

the copy to the array capacity.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Published
2026-09-25T15:17Z
References (5)
https://git.kernel.org/stable/c/37bef2170d4c88fc3d708eecf3ef0f4032bc1372 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7992059c045780095ba5a696dcb2f5400a82803c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ad47a250afafa3a51cfb4a004463ff28e66c596e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/eb0ea3898e3921900939e30c3946dd2b52281859 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f19acf00818a9eada06a77715d0188c181fb435e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:22Z
    media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
    cvelistv5