VULNERABILITY INTELLIGENCE

CVE-2024-53104

CVSS score7.8 HIGH
EPSS probability3.40%
CISA KEVKnown exploited vulnerability
Published2024-12-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Linux Kernel Out-of-Bounds Write Vulnerability

Vendor / product: Linux / Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references