Threats tagged 'ghsa-7rq6-3vvj-vpcc'

A vulnerability in the Linux kernel's media subsystem for dvb-usb devices using the dtv5100 driver allows an out-of-bounds write due to improper validation of a user-controlled length value in the dtv5100_i2c_msg() function. This can lead to memory corruption. The issue arises because the rlen parameter is not checked against the size of the destination buffer, st->data. A fix has been implemented to add proper range checking to prevent this vulnerability.