In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat
This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvcparsestreaming.
[
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-0d2ba8f5",
"digest": {
"length": 6593.0,
"function_hash": "190456429402961704879050282171772788048"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faff5bbb2762c44ec7426037b3000e77a11d6773",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-0e36b5b1",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"308058246801808323720061092161042577581",
"184437814737638819880029421023391029014"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@622ad10aae5f5e03b7927ea95f7f32812f692bb5",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-2e5f3262",
"digest": {
"length": 6497.0,
"function_hash": "205557511533447812444064476870595940953"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684022f81f128338fe3587ec967459669a1204ae",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-3df9dc3f",
"digest": {
"length": 6181.0,
"function_hash": "189046075105995684337594990704674722097"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-40f3ea8d",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"225175023848998841398186290211465281957",
"92850428422777379934470600922725549404"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@467d84dc78c9abf6b217ada22b3fdba336262e29",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-5216145c",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"308058246801808323720061092161042577581",
"184437814737638819880029421023391029014"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecf2b43018da9579842c774b7f35dbe11b5c38dd",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-678b2ffd",
"digest": {
"length": 5816.0,
"function_hash": "280130390818871782503200057244726680801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@467d84dc78c9abf6b217ada22b3fdba336262e29",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-7d64770f",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"308058246801808323720061092161042577581",
"184437814737638819880029421023391029014"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ee9d9122801eb688783acd07791f2906b87cb4f",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-91f6bc0a",
"digest": {
"line_hashes": [
"75261013647782921282195265314102083121",
"17127047534150347989595357807094220812",
"225175023848998841398186290211465281957",
"92850428422777379934470600922725549404"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@faff5bbb2762c44ec7426037b3000e77a11d6773",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-9247c40f",
"digest": {
"length": 5901.0,
"function_hash": "256131711596353475240641155307902620530"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecf2b43018da9579842c774b7f35dbe11b5c38dd",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-96585eb5",
"digest": {
"length": 5901.0,
"function_hash": "256131711596353475240641155307902620530"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@622ad10aae5f5e03b7927ea95f7f32812f692bb5",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-b09d267c",
"digest": {
"length": 5901.0,
"function_hash": "256131711596353475240641155307902620530"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@575a562f7a3ec2d54ff77ab6810e3fbceef2a91d",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-b6822ec3",
"digest": {
"length": 5870.0,
"function_hash": "28801358841707519660609948544665298819"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beced2cb09b58c1243733f374c560a55382003d6",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-c556329c",
"digest": {
"line_hashes": [
"75261013647782921282195265314102083121",
"17127047534150347989595357807094220812",
"225175023848998841398186290211465281957",
"92850428422777379934470600922725549404"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684022f81f128338fe3587ec967459669a1204ae",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-e7e2649f",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"308058246801808323720061092161042577581",
"184437814737638819880029421023391029014"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@575a562f7a3ec2d54ff77ab6810e3fbceef2a91d",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c",
"function": "uvc_parse_format"
},
"signature_version": "v1",
"id": "CVE-2024-53104-ef627545",
"digest": {
"length": 5901.0,
"function_hash": "256131711596353475240641155307902620530"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ee9d9122801eb688783acd07791f2906b87cb4f",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-f8c898ac",
"digest": {
"line_hashes": [
"266792207385229186384717707134063183888",
"17127047534150347989595357807094220812",
"225175023848998841398186290211465281957",
"92850428422777379934470600922725549404"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beced2cb09b58c1243733f374c560a55382003d6",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "drivers/media/usb/uvc/uvc_driver.c"
},
"signature_version": "v1",
"id": "CVE-2024-53104-fa094ebf",
"digest": {
"line_hashes": [
"75261013647782921282195265314102083121",
"17127047534150347989595357807094220812",
"225175023848998841398186290211465281957",
"92850428422777379934470600922725549404"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8",
"deprecated": false,
"signature_type": "Line"
}
]