High 7.8Published May 6, 2026

CVE-2026-43222media: verisilicon: AV1: Fix tile info buffer size

Updated under an hour ago (Oct 27, 2026, 7:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate the buffer and avoid writing tile info in non-allocated memory.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 727a400686a2c0d25015c9e44916a59b72882f83 before a5b1ddbe31f49b4da78642157589970e9b60a231; 727a400686a2c0d25015c9e44916a59b72882f83 builds before 34f36f9c6114af781a5a4f7a7c99334c85b73fc7; from 727a400686a2c0d25015c9e44916a59b72882f83 before f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4; 727a400686a2c0d25015c9e44916a59b72882f83 builds before 74abfadd7ef5ac9f3a6111d550cc651d1457c641; from 727a400686a2c0d25015c9e44916a59b72882f83 before a505ca2db89ad92a8d8d27fa68ebafb12e04a679	CNA record
linux linux_kernel linux:linux_kernel	from 6.5 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/a5b1ddbe31f49b4da78642157589970e9b60a231	patch
https://git.kernel.org/stable/c/34f36f9c6114af781a5a4f7a7c99334c85b73fc7	patch
https://git.kernel.org/stable/c/f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4	patch
https://git.kernel.org/stable/c/74abfadd7ef5ac9f3a6111d550cc651d1457c641	patch
https://git.kernel.org/stable/c/a505ca2db89ad92a8d8d27fa68ebafb12e04a679	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.