Threats tagged 'ghsa-fhp7-73g8-wj3g'

A vulnerability in the Linux kernel's media subsystem related to the validation of AV1 tile counts in stateless AV1 decoders has been resolved. The issue involves improper bounds checking of tile_cols and tile_rows fields, which are used as loop bounds and indices in various arrays and calculations. This could lead to out-of-bounds access or buffer overflows. The fix enforces validation to reject AV1 frame controls with tile counts exceeding defined maximums, while still accepting zero tile counts as before.