CVE-2024-47754 Information

Description

In the Linux kernel the following vulnerability has been resolved:

media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning

Fix a smatch static checker warning on vdec_h264_req_multi_if.c. Which leads to a kernel crash when fb is NULL.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Reference

https://git.kernel.org/stable/c/588bcce9e64cc5138858ab562268eb3943c5b06c https://git.kernel.org/stable/c/47b3b97930913ca74a595cc12bdbb650259afc6e https://git.kernel.org/stable/c/301f7778263116388c20521a1a641067647ab31c https://git.kernel.org/stable/c/9be85491619f1953b8a29590ca630be571941ffa

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

5.5

Share on: