CVE-2026-0163-EXP

CVE-2026-0163 DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview A functional remot...

The vulnerability of the vpu_load_firmware() function in the drivers/media/platform/mediatek/vpu/mtk_vpu.c file of the MediaTek VPU video processor driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerabilities of the functions venc_g_parm() and venc_s_parm() in the driver/drivers/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems allow a malicious actor to cause service failures.

The vulnerability of the functions vencgparm and vencsparm in the driver/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-89866

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

Linux Distros Unpatched Vulnerability : CVE-2026-89896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55351

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78983

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

A missing permission check in VPU allows for a potential permission bypass . This vulnerability could enable local escalation of privilege to System execution privileges without requiring user interaction. No specific affected versions, root cause details, or remediation steps are provided in the...

EUVD-2026-78970

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU , a confused deputy vulnerability allows for a possible out-of-bounds write . This flaw could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. No specific exploit links or remediation details are provided in the documents.

EUVD-2026-78961

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...