CVE-2023-52512

pinctrl: nuvoton: wpcm450: fix out of bounds write

State: Published
Severity: 5.5 Medium
Published: Mar 2, 2024
Updated: May 11, 2026
Reserved: Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: nuvoton: wpcm450: fix out of bounds write

Write into 'pctrl->gpio_bank' happens before the check for GPIO index validity, so out of bounds write may happen.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	a1d1e0e3d80a870cc37a6c064994b89e963d2b58 to before 6c18c386fd13dbb3ff31a1086dabb526780d9bdaAffected a1d1e0e3d80a870cc37a6c064994b89e963d2b58 to before c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8Affected a1d1e0e3d80a870cc37a6c064994b89e963d2b58 to before 87d315a34133edcb29c4cadbf196ec6c30dfd47bAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.59 through 6.1.Not affected 6.5.8 through 6.5.Not affected 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.