7.8

CVE-2026-97576

media: v4l2-ctrls: validate HEVC tile counts

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-ctrls: validate HEVC tile counts

The stateless HEVC decoders read num_tile_columns_minus1 + 1 entries from
column_width_minus1[] and num_tile_rows_minus1 + 1 from row_height_minus1[]
and use them as tile-loop bounds, but std_validate_compound() does not
bound these u8 counts. Reject a V4L2_CTRL_TYPE_HEVC_PPS with tiling
enabled whose tile counts exceed the uAPI array capacity, mirroring the
existing compound-control range checks.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < 9c0a718e24d4cd6d975f3df9740f968f62891a20
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < 975e0180488966bb709092a52408604bd4f4edd9
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < 724915535558b14c111ad8a498b896026dfe8d20
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < 400cd78a63cc647412cf069c9851bdea2818340c
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < c7b1ef6dc57f4e57fe27cfdd3bf82033ed91ca34
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < ba1023d3a6d5d244d59f20c4ba6af4879ae08a9f
Status affected
Version 256fa3920874b0f1f4cb79ad6766493a22187153
Version < dc694a9929f7cb9c88ef91e45eb982b7bbe5a477
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.5
Status affected
Version 0
Version < 5.5
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.049
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/400cd78a63cc647412cf069c9851bdea2818340c
https://git.kernel.org/stable/c/c7b1ef6dc57f4e57fe27cfdd3bf82033ed91ca34
https://git.kernel.org/stable/c/ba1023d3a6d5d244d59f20c4ba6af4879ae08a9f
https://git.kernel.org/stable/c/dc694a9929f7cb9c88ef91e45eb982b7bbe5a477
https://git.kernel.org/stable/c/724915535558b14c111ad8a498b896026dfe8d20
https://git.kernel.org/stable/c/975e0180488966bb709092a52408604bd4f4edd9
https://git.kernel.org/stable/c/9c0a718e24d4cd6d975f3df9740f968f62891a20