Threats tagged 'ghsa-jj87-p9c8-ffw2'

A vulnerability in the Linux kernel's media subsystem for Verisilicon Rockchip AV1 decoding allows frames with tile counts exceeding the tile capacity to be processed, leading to out-of-bounds reads. This occurs because the tile group entry array is indexed beyond its submitted size when tile counts are not properly validated. The issue has been resolved by rejecting AV1 frames that exceed the maximum allowed tiles or the submitted entry count.