Threats tagged 'ghsa-f426-43f4-xjrc'

CVE-2026-43256 is a high-severity vulnerability in the Linux kernel's Qualcomm camera subsystem (camss) affecting the vfe_isr_reg_update() function. The issue arises from an out-of-bounds memory access due to improper indexing of the vfe->line array, which has fewer elements than the loop bound used in vfe_isr(). This flaw could lead to memory corruption with high impact on confidentiality, integrity, and availability. The vulnerability has been fixed by separating the loops for output lines and write masters to prevent out-of-bounds access.