CVE-2023-52565

media: uvcvideo: Fix OOB read

State: Published
Severity: 7.1 High
Published: Mar 2, 2024
Updated: Aug 5, 2026
Reserved: Mar 2, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Fix OOB read

If the index provided by the user is bigger than the mask size, we might do an out of bound read.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	367703c3ec4f72208b8cae14310b8a2c955ec565 to before 09635bf4cdd4adf2160198a6041bcc7ca46c0558Affected 40140eda661ea4be219ef194a4f43b7b5e3bbd27 to before 8bcf70d787f7d53a3b85ad394f926cfef3eed023Affected 40140eda661ea4be219ef194a4f43b7b5e3bbd27 to before 41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdbAffected 42cbbc6b2c39b02e07cbd24dc2155d4edb99dd04Affected 6.1.16 to before 6.1.56Affected 6.2.3 to before 6.3Affected
LinuxLinux	6.3Affected before 6.3Not affected 6.1.56 through 6.1.Not affected 6.5.6 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

367703c3ec4f72208b8cae14310b8a2c955ec565 to before 09635bf4cdd4adf2160198a6041bcc7ca46c0558Affected
40140eda661ea4be219ef194a4f43b7b5e3bbd27 to before 8bcf70d787f7d53a3b85ad394f926cfef3eed023Affected
40140eda661ea4be219ef194a4f43b7b5e3bbd27 to before 41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdbAffected
42cbbc6b2c39b02e07cbd24dc2155d4edb99dd04Affected
6.1.16 to before 6.1.56Affected
6.2.3 to before 6.3Affected

LinuxLinux

6.3Affected
before 6.3Not affected
6.1.56 through 6.1.*Not affected
6.5.6 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.