Threats tagged 'ghsa-3hvv-xgr4-fr7x'

CVE-2025-23159 is a medium severity vulnerability in the Linux kernel's media subsystem, specifically in the Venus hardware interface (hfi) component. It involves an out-of-bounds (OOB) write due to improper handling of the sfr region buffer size, which can be manipulated by a malicious user. The vulnerability allows an OOB write when the sfr buffer size is set larger than the actual allocated buffer. This flaw has been addressed by adding a check to cap the size to the allocated buffer size, preventing OOB writes.