Description
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate the buffer and avoid writing tile info in non-allocated memory.
References (5)
Core 5
Core References
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (13)
Linux/Linux
< 6.5
Linux/Linux
6.12.75 - 6.12.*
Linux/Linux
6.18.16 - 6.18.*
Linux/Linux
6.19.6 - 6.19.*
Linux/Linux
6.5
Linux/Linux
6.6.128 - 6.6.*
Linux/Linux
7.0
Linux/Linux
727a400686a2c0d25015c9e44916a59b72882f83 - 34f36f9c6114af781a5a4f7a7c99334c85b73fc7
Linux/Linux
727a400686a2c0d25015c9e44916a59b72882f83 - 74abfadd7ef5ac9f3a6111d550cc651d1457c641
Linux/Linux
727a400686a2c0d25015c9e44916a59b72882f83 - a505ca2db89ad92a8d8d27fa68ebafb12e04a679
... and 3 more
Published
May 06, 2026
Tracked Since
May 06, 2026