Riskcovery

CVE-2022-49165

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kernel NULL pointer dereference" in mxc_jpeg_addrs, prevent this by finishing the job with error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before eff76b180751e5e55c872d17755680c3b83ba9abAffected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 8d075ede7d24f19dc817c5bd517a53f0524f9031Affected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 4eb591c47c82a6a6ad293ed108c3cb77115fbc25Affected
  • 2db16c6ed72ce644d5639b3ed15e5817442db4ba to before 417591a766b3c040c346044541ff949c0b2bb7b2Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.