← Database

CVE-2024-53104

HIGH CVSS: 7.8 Published: 2024-12-02 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Affected Platforms

Debian Debian LinuxLinux Linux Kernel

Weakness Type

CWE-787, CWE-787

References