EUVD-2026-86889

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97581

The Linux kernel contains a vulnerability in the verisilicon hantro media driver. The prepare_tile_info_buffer() function fails to properly bound loops when writing entries into the tile_sizes DMA buffer , which is sized based on the PPS uAPI array capacity . This lack of bounds checking can lead...