Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48739
HistoryJun 20, 2024 - 11:13 a.m.

CVE-2022-48739 ASoC: hdmi-codec: Fix OOB memory accesses

2024-06-2011:13:24
Linux
github.com
2
asoc
hdmi-codec
oob memory accesses
linux kernel
snd_aes_iec958
slab read
memcpy
kasan

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ASoC: hdmi-codec: Fix OOB memory accesses

Correct size of iec_status array by changing it to the size of status
array of the struct snd_aes_iec958. This fixes out-of-bounds slab
read accesses made by memcpy() of the hdmi-codec driver. This problem
is reported by KASAN.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial