In the Linux kernel, the following vulnerability has been resolved:
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Reject voltage objects whose usSize is smaller than the header or would
advance the cursor past the table end, preventing an infinite loop or
heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.
from c82baa28184356a75c0157129f88af42b2e7b695 before 574af7c61f2bed37baa3b60669e428d24d2c9ae8; from c82baa28184356a75c0157129f88af42b2e7b695 before 203ffe648948ca3c2f55b21118945a7a6d0884aa; from c82baa28184356a75c0157129f88af42b2e7b695 before 0a6c9b3801903b6db91f3cbf148646b501dbded3; from c82baa28184356a75c0157129f88af42b2e7b695 before 83c680de6d41d627c077dedb24f89d9e5be0e2a2; from c82baa28184356a75c0157129f88af42b2e7b695 before 5d3cc8e388464f485d0944b87b8f9426e637d082
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.