Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-23157

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning.

Published

2025-05-01T13:15:51.623

Last Modified

2025-11-05T17:56:19.827

Status

Analyzed

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity

CVSSv3.1: 7.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 5.4.293 Yes
Operating System linux linux_kernel < 5.10.237 Yes
Operating System linux linux_kernel < 5.15.181 Yes
Operating System linux linux_kernel < 6.1.135 Yes
Operating System linux linux_kernel < 6.6.88 Yes
Operating System linux linux_kernel < 6.12.24 Yes
Operating System linux linux_kernel < 6.13.12 Yes
Operating System linux linux_kernel < 6.14.3 Yes
Operating System debian debian_linux 11.0 Yes
References