CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the media subsystem, specifically the handling of HEVC SPS control parameters, which could allow decoder drivers to access memory beyond defined limits. This could lead to potential memory corruption or denial of service if improperly validated values are processed. Organizations using Linux systems with media processing capabilities should prioritize addressing this issue to mitigate risks associated with media decoding operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC limits of 64 short-term sets and 32 long-term references so drivers cannot later index beyond those controls. Also reject EXT SPS ST RPS entries whose negative or positive picture counts exceed the 16-entry arrays, or whose combined delta-POC count exceeds the HEVC DPB maximum.