In the Linux kernel, the following vulnerability has been resolved:
media: tda18250: fix possible integer overflow
Integer overflow may occur, when variable exp equals to zero. Result
of shift 1 << (exp - 1) may then leads to undefined behavior.
from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 4e21f0e5696d3148b183c7e21dd44f7dec0d07ef; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 3e5568d554c5f6da2cbba45684295927ebefd943; from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before 593b1172e5d548581dfdb9a63713088f5dfab255; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc; from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before f1ba602afd5ee6609fd71a0d112d18e8447a485f; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
