CVE-2026-97581
kernel: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 25, 2026
Updated · September 29, 2026
Description
A flaw was found in the Linux kernel's Hantro video decoder driver. When processing High Efficiency Video Coding (HEVC) video streams, the driver fails to validate the number of tile rows and columns against the allocated buffer capacity. A local attacker could exploit this vulnerability by submitting crafted video parameters to trigger an out-of-bounds memory write. This issue can lead to kernel memory corruption or a system crash, resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-787 · Out-of-bounds Write