CVE-2026-97579

The Linux kernel contains a vulnerability in the mediatek vcodec component. Specifically, the function vdec_av1_slice_setup_tile() fails to validate that the number of entries copied from the bitstream tile_info (calculated as tile_cols + 1 and tile_rows + 1) does not exceed the capacity of the m...

CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...