-

CVE-2026-97581

media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity

In the Linux kernel, the following vulnerability has been resolved:

media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity

prepare_tile_info_buffer() writes one entry per tile into the tile_sizes
DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the
bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows()
helpers so the loops stay inside the buffer.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 6d192fc0d6faff25ecf6d52cbde4b939cb12c192
Status affected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 2887a98c03d97a6fcb6c2dab92956f2f4c402cdd
Status affected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 62ae24639d22909a5724627a0467e4bde9704020
Status affected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 4f654c9bc954569ff9b8ab860b29480c4cf6f57b
Status affected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8
Status affected
Version cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Version < 06236b094c899c22c12ac5097935eb6719293de8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.14
Status affected
Version 0
Version < 5.14
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.088
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/62ae24639d22909a5724627a0467e4bde9704020
https://git.kernel.org/stable/c/4f654c9bc954569ff9b8ab860b29480c4cf6f57b
https://git.kernel.org/stable/c/05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8
https://git.kernel.org/stable/c/06236b094c899c22c12ac5097935eb6719293de8
https://git.kernel.org/stable/c/2887a98c03d97a6fcb6c2dab92956f2f4c402cdd
https://git.kernel.org/stable/c/6d192fc0d6faff25ecf6d52cbde4b939cb12c192