Threats tagged 'ghsa-2x7p-4659-c97x'

A vulnerability in the Linux kernel's ALSA usbusx2y driver involves an array size mismatch between in04_last and in04_buf, leading to a potential out-of-bounds read. The in04_last array is declared with 24 bytes, but in04_buf is allocated with 21 bytes. During initialization, 24 bytes are copied from a 21-byte buffer, reading beyond the buffer boundary. This issue has been resolved by introducing a consistent size constant for these buffers.