CVE-2026-98882
NONE—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
—CWE
Description
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Add range checks for dec_output_info
If the driver's dec_output_info contains invalid data the driver can
write in invalid memory. Add a range check for that.
This fixes this smatch error:
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
Affected routers (0)
No routers currently mapped to this CVE in our database.