25 matches found
CVE-2026-68229
A flaw was found in the Linux kernel's Cedrus media driver. This vulnerability allows an attacker to cause an out-of-bounds read by providing specially crafted H.264 video streams with invalid reference list entries. This could lead to system instability or potentially information disclosure...
CVE-2026-68206
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...
UBUNTU-CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
EUVD-2026-55330
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229
The CVE-2026-68229 entry covers a Linux kernel issue in the Cedrus H.264 driver. Cedrus would parse stateless H.264 ref_pic_list0/ref_pic_list1 entries and later index decode->dpb[] in _cedrus_write_ref_list(). A proposed fix guards the DPB lookup rather than rejecting the control path, becaus...
Linux Distros Unpatched Vulnerability : CVE-2026-68229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses...
MAL-2025-16701 Malicious code in cedrus-example-loader (npm)
The package cedrus-example-loader was found to contain malicious code...
Malicious code in cedrus-example-loader (npm)
The package cedrus-example-loader was found to contain malicious code...
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
...
CVE-2023-35826
A race condition was found in the Linux kernel's Allwinner Cedrus VPU driver when removing the module before cleanup in the cedrusremove function. This can result in a use-after-free issue, possibly leading to a system crash or other undefined behaviors...
SUSE CVE-2023-35826
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
DEBIAN-CVE-2023-35826
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
AZL-27331 CVE-2023-35826 affecting package hyperv-daemons for versions less than 5.15.158.1-1
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
AZL-27243 CVE-2023-35826 affecting package kernel for versions less than 5.15.122.1-2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
CVE-2023-35826
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrusremove in drivers/staging/media/sunxi/cedrus/cedrus.c...
