Riskcovery

CVE-2026-97579

media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

State
Published
Severity
7.8 High
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound the copy to the array capacity.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0934d37596151edce115c6d0843a9ad7d5e5d232 to before f19acf00818a9eada06a77715d0188c181fb435eAffected
  • 0934d37596151edce115c6d0843a9ad7d5e5d232 to before ad47a250afafa3a51cfb4a004463ff28e66c596eAffected
  • 0934d37596151edce115c6d0843a9ad7d5e5d232 to before 7992059c045780095ba5a696dcb2f5400a82803cAffected
  • 0934d37596151edce115c6d0843a9ad7d5e5d232 to before eb0ea3898e3921900939e30c3946dd2b52281859Affected
  • 0934d37596151edce115c6d0843a9ad7d5e5d232 to before 37bef2170d4c88fc3d708eecf3ef0f4032bc1372Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.