Threats tagged 'ghsa-hx26-xg26-jr99'

CVE-2025-23156 is a high-severity vulnerability in the Linux kernel's media subsystem, specifically in the venus hfi_parser component. The flaw involves an out-of-bounds (OOB) memory access caused by incorrect handling of payload parsing when the words_count reaches the last word, allowing data to access memory beyond the intended payload. This issue has been resolved by refactoring the packet parsing logic to correctly calculate remaining bytes before parsing, preventing OOB access.