Security tracker / CVE-2024-43831

CVE-2024-43831

media: mediatek: vcodec: Handle invalid decoder vsi

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 590577a4e525 ("[media] vcodec: mediatek: Add Mediatek V4L2 Video
 carnil> Decoder Driver"). Vulnerable versions: 4.10-rc1.

Bugs

Status

Branch	Status
upstream	released (6.11-rc1) [59d438f8e02ca641c58d77e1feffa000ff809e9f]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.10-upstream-stable	released (6.10.3) [cdf05ae76198c513836bde4eb55f099c44773280]
6.6-upstream-stable	released (6.6.44) [1c109f23b271a02b9bb195c173fab41e3285a8db]
6.1-upstream-stable	released (6.1.131) [dbd3e4adb98e50ede74f00b3fa956fa29ef95e6c]
5.10-upstream-stable	needed
sid	released (6.10.3-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.133-1)
5.10-bullseye-security	needed