CVE-2022-49165
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49165
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49165.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49165
- Downstream
- Related
- Published
- 2025-02-26T01:55:25Z
- Modified
- 2025-10-21T09:23:15.721113Z
- Summary
- media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kernel NULL pointer dereference" in mxcjpegaddrs, prevent this by finishing the job with error.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/417591a766b3c040c346044541ff949c0b2bb7b2
- https://git.kernel.org/stable/c/4eb591c47c82a6a6ad293ed108c3cb77115fbc25
- https://git.kernel.org/stable/c/8d075ede7d24f19dc817c5bd517a53f0524f9031
- https://git.kernel.org/stable/c/eff76b180751e5e55c872d17755680c3b83ba9ab
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2db16c6ed72ce644d5639b3ed15e5817442db4baFixedeff76b180751e5e55c872d17755680c3b83ba9ab
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2db16c6ed72ce644d5639b3ed15e5817442db4baFixed8d075ede7d24f19dc817c5bd517a53f0524f9031
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2db16c6ed72ce644d5639b3ed15e5817442db4baFixed4eb591c47c82a6a6ad293ed108c3cb77115fbc25
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2db16c6ed72ce644d5639b3ed15e5817442db4baFixed417591a766b3c040c346044541ff949c0b2bb7b2
Affected versions
v5.*
v5.12
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.4
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.10
v5.16.11
v5.16.12
v5.16.13
v5.16.14
v5.16.15
v5.16.16
v5.16.17
v5.16.18
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.16.8
v5.16.9
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
Database specific
vanir_signatures
[
{
"id": "CVE-2022-49165-3b1468f8",
"target": {
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eff76b180751e5e55c872d17755680c3b83ba9ab",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"252528488853539106830227610913821176844",
"171201050469806862234841788279772573120",
"17209967971497741243074301531456865791",
"240150130930681787536681249341438588230"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-46766693",
"target": {
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d075ede7d24f19dc817c5bd517a53f0524f9031",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"252528488853539106830227610913821176844",
"171201050469806862234841788279772573120",
"17209967971497741243074301531456865791",
"240150130930681787536681249341438588230"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-639f2f4b",
"target": {
"function": "mxc_jpeg_device_run",
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4eb591c47c82a6a6ad293ed108c3cb77115fbc25",
"signature_type": "Function",
"digest": {
"function_hash": "190101607810999269350333079063673959655",
"length": 1981.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-7e1c003d",
"target": {
"function": "mxc_jpeg_device_run",
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@417591a766b3c040c346044541ff949c0b2bb7b2",
"signature_type": "Function",
"digest": {
"function_hash": "190101607810999269350333079063673959655",
"length": 1981.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-8bb2ee27",
"target": {
"function": "mxc_jpeg_device_run",
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eff76b180751e5e55c872d17755680c3b83ba9ab",
"signature_type": "Function",
"digest": {
"function_hash": "133532940290975892816596486296123733581",
"length": 2000.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-9c02cf51",
"target": {
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@417591a766b3c040c346044541ff949c0b2bb7b2",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"252528488853539106830227610913821176844",
"171201050469806862234841788279772573120",
"17209967971497741243074301531456865791",
"240150130930681787536681249341438588230"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-a0052b9f",
"target": {
"function": "mxc_jpeg_device_run",
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d075ede7d24f19dc817c5bd517a53f0524f9031",
"signature_type": "Function",
"digest": {
"function_hash": "190101607810999269350333079063673959655",
"length": 1981.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"id": "CVE-2022-49165-acdf202b",
"target": {
"file": "drivers/media/platform/imx-jpeg/mxc-jpeg.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4eb591c47c82a6a6ad293ed108c3cb77115fbc25",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"252528488853539106830227610913821176844",
"171201050469806862234841788279772573120",
"17209967971497741243074301531456865791",
"240150130930681787536681249341438588230"
]
},
"deprecated": false,
"signature_version": "v1"
}
]