In the Linux kernel, the following vulnerability has been resolved:
media: cec: extron-da-hd-4k-plus: add sanity check
Add check to prevent overflowing msg.msg[] in case the incoming data
is malformed.
CVSS
8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
056f2821b631df2b94d3b017fd1e1eef918ed98d builds before 00c13b4ab481a09d915d099815cff1b10926ddd9; from 056f2821b631df2b94d3b017fd1e1eef918ed98d before 673611cc2ab9769929644ce879f7ea34932a3011; 056f2821b631df2b94d3b017fd1e1eef918ed98d builds before 7ad2fec276946a0dedfa54eb26fc38c4fc6a6034; from 056f2821b631df2b94d3b017fd1e1eef918ed98d before abac9820b26b5cfcb01eb79efe2abdd0ac7e07c3
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.