CVE-2023-53748
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
08/12/2025
Última modificación:
08/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup<br />
<br />
variable *nplanes is provided by user via system call argument. The<br />
possible value of q_data->fmt->num_planes is 1-3, while the value<br />
of *nplanes can be 1-8. The array access by index i can cause array<br />
out-of-bounds.<br />
<br />
Fix this bug by checking *nplanes against the array size.



