In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: anx7625: Fix overflow issue on reading EDID
The length of EDID block can be longer than 256 bytes, so we should use
int instead of u8 for the edid_pos variable.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49222.json",
"cna_assigner": "Linux"
}[
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c",
"function": "sp_tx_edid_read"
},
"id": "CVE-2022-49222-060aac8f",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64c06df2428bb7bb3d8cf5691416001af42d94dd",
"digest": {
"function_hash": "9429801073678729110752502796810875313",
"length": 1703.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c",
"function": "sp_tx_edid_read"
},
"id": "CVE-2022-49222-35972f13",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5c6f647aec9ed524aedd04a3aec5ebc21d39007",
"digest": {
"function_hash": "145592520975518330089403627838211906603",
"length": 1775.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c"
},
"id": "CVE-2022-49222-c54f9335",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db1c47d299298a7c52ccb201905d6be979fd7507",
"digest": {
"line_hashes": [
"297749540702535289691574044056588467651",
"57097510256762263329614175171308381113",
"269506254198634541621919335805313780004",
"185342182510449656213244056874342832360"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c",
"function": "sp_tx_edid_read"
},
"id": "CVE-2022-49222-cff6f7ef",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db1c47d299298a7c52ccb201905d6be979fd7507",
"digest": {
"function_hash": "145592520975518330089403627838211906603",
"length": 1775.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c"
},
"id": "CVE-2022-49222-d8e7e989",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64c06df2428bb7bb3d8cf5691416001af42d94dd",
"digest": {
"line_hashes": [
"297749540702535289691574044056588467651",
"57097510256762263329614175171308381113",
"269506254198634541621919335805313780004",
"185342182510449656213244056874342832360"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/gpu/drm/bridge/analogix/anx7625.c"
},
"id": "CVE-2022-49222-e1800a8a",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5c6f647aec9ed524aedd04a3aec5ebc21d39007",
"digest": {
"line_hashes": [
"297749540702535289691574044056588467651",
"57097510256762263329614175171308381113",
"269506254198634541621919335805313780004",
"185342182510449656213244056874342832360"
],
"threshold": 0.9
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49222.json"