Threats tagged 'ghsa-f6mg-77cc-c9pm'

CVE-2025-23158 is a high-severity vulnerability in the Linux kernel's media subsystem, specifically in the venus hfi driver. It involves an out-of-bounds (OOB) write caused by improper handling of an incorrect queue size value that can be manipulated by firmware. The vulnerability arises because the queue size (qsize) can be set to an invalid large value, leading to incorrect calculations of available space and unchecked write indices, resulting in memory corruption.