Threats tagged 'ghsa-mr7g-g7q3-wvpx'

CVE-2025-23157 is a high-severity vulnerability in the Linux kernel's media subsystem, specifically in the venus hfi_parser component. The flaw involves an out-of-bounds (OOB) access risk when the init_codecs function is invoked multiple times with manipulated video firmware payloads, potentially causing the codecs_count to exceed its maximum allowed value. This can lead to memory corruption. The issue has been resolved by adding a check to reset the codec count to prevent OOB access.