The vulnerability of the vpu_load_firmware() function in the drivers/media/platform/mediatek/vpu/mtk_vpu.c file of the MediaTek VPU video processor driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-55301

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the VPU_IOCX_OPEN_INSTANCE() and vpu_put_inst() functions in the VPU operating system driver for Android allows a hacker to cause a service failure.

The vulnerability of the VPUIOCXOPENINSTANCE and vpuputinst functions in the VPU operating system driver of Android is related to the use of memory after it is freed, as a result of retrieving the driver instance from an array and resetting the reference counter before closing it. Exploiting this...

AZL-88719 CVE-2026-46058 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m jobabort and devicerun Fix kernel panic caused by race condition where v4l2m2mctxrelease frees m2mctx while v4l2m2mtryrun is about to call devicerun with the same context. Race sequence:...

CVE-2026-46058: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m jobabort and devicerun Fix kernel panic caused by race condition where v4l2m2mctxrelease frees m2mctx while v4l2m2mtryrun is about to call devicerun with the same context. Race sequence:...

PT-2026-24441

In vpu open inst of vpu ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-6005

Name of the Vulnerable Software and Affected Versions Android VPU driver versions prior to the February 2026 security patch Description The issue resides within the vpu ioctl function, specifically in the vpu mmap component. A missing bounds check allows for a potential arbitrary address mapping...

CVE-2023-35826

A race condition was found in the Linux kernel's Allwinner Cedrus VPU driver when removing the module before cleanup in the cedrusremove function. This can result in a use-after-free issue, possibly leading to a system crash or other undefined behaviors...