← Database

CVE-2024-50007

HIGH CVSS: 7.8 Published: 2024-10-21 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size.

Affected Platforms

Debian Debian LinuxLinux Linux Kernel

Weakness Type

CWE-129

References