Threats tagged 'ghsa-6hr7-2c35-r8xm'

CVE-2024-50180 is a high-severity vulnerability in the Linux kernel's fbdev sisfb driver involving a strbuf array overflow. The issue arises because the strbuf array is too small to safely hold formatted resolution strings, leading to potential buffer overflow when writing more than 16 bytes. The vulnerability was identified by the Linux Verification Center and relates to improper handling of xres and yres variables in string formatting.