Riskcovery

CVE-2026-98882

media: chips-media: wave5: Add range checks for dec_output_info

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 26, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Add range checks for dec_output_info

If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that.

This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 45d1a2b93277a24a90265055f5b87c7562d6acb9 to before d6f777d11c7b34549cdadd8578d4b85f685eb976Affected
  • 45d1a2b93277a24a90265055f5b87c7562d6acb9 to before 144f24ec0fc1e51673611912a6d14ded0a61db43Affected
  • 45d1a2b93277a24a90265055f5b87c7562d6acb9 to before 79aef69bb0903616f4867f0168aea717a11c439cAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.