Riskcovery

CVE-2023-53748

media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup

State
Published
Severity
7.1 High
Published
Dec 8, 2025
Updated
Aug 5, 2026
Reserved
Dec 8, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup

variable *nplanes is provided by user via system call argument. The possible value of q_data->fmt->num_planes is 1-3, while the value of *nplanes can be 1-8. The array access by index i can cause array out-of-bounds.

Fix this bug by checking *nplanes against the array size.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before 48e4e06e2c5fe1fda283d499f91492eda2248bb9Affected
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before b8e19bf3b4aebd855be01b64674187dcf6d1db51Affected
  • 590577a4e5257ac3ed72999a94666ad6ba8f24bc to before 8fbcf730cb89c3647f3365226fe7014118fa93c7Affected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 6.1.30 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.