NetSight
IP …
high7.8

CVE-2025-23157

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility tha…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 5.4.293
from 5.5 before 5.10.237
from 5.11 before 5.15.181
from 5.16 before 6.1.135
from 6.2 before 6.6.88
from 6.7 before 6.12.24
DebianDebian Linux
Version 11.0

Weakness classification

CWE-125

References