Unrated severityNVD Advisory· Published Oct 23, 2026
CVE-2026-98882
CVE-2026-98882
Description
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Add range checks for dec_output_info
If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that.
This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
Affected products
1Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.