In the Linux kernel, the following vulnerability has been resolved:

media: verisilicon: AV1: Fix tile info buffer size

Each tile info is composed of: row_sb, col_sb, start_pos
and end_pos (4 bytes each). So the total required memory
is AV1_MAX_TILES * 16 bytes.
Use the correct #define to allocate the buffer and avoid
writing tile info in non-allocated memory.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
727a400686a2c0d25015c9e44916a59b72882f83 affected < a5b1ddbe31f49b4da78642157589970e9b60a231
727a400686a2c0d25015c9e44916a59b72882f83 affected < 34f36f9c6114af781a5a4f7a7c99334c85b73fc7
727a400686a2c0d25015c9e44916a59b72882f83 affected < f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4
727a400686a2c0d25015c9e44916a59b72882f83 affected < 74abfadd7ef5ac9f3a6111d550cc651d1457c641
727a400686a2c0d25015c9e44916a59b72882f83 affected < a505ca2db89ad92a8d8d27fa68ebafb12e04a679
Linux Linux affected
Version Status Constraints
6.5 affected —
0 unaffected < 6.5
6.6.128 unaffected ≤ 6.6.*
6.12.75 unaffected ≤ 6.12.*
6.18.16 unaffected ≤ 6.18.*
6.19.6 unaffected ≤ 6.19.*
7.0 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/34f36f9c6114af781a5a4f7a7c99334c85b73fc7 cve-icon cve-icon
https://git.kernel.org/stable/c/74abfadd7ef5ac9f3a6111d550cc651d1457c641 cve-icon cve-icon
https://git.kernel.org/stable/c/a505ca2db89ad92a8d8d27fa68ebafb12e04a679 cve-icon cve-icon
https://git.kernel.org/stable/c/a5b1ddbe31f49b4da78642157589970e9b60a231 cve-icon cve-icon
https://git.kernel.org/stable/c/f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4 cve-icon cve-icon
History

Wed, 06 May 2026 12:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate the buffer and avoid writing tile info in non-allocated memory.
Title media: verisilicon: AV1: Fix tile info buffer size
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-06T11:28:22.291Z

Reserved: 2026-05-01T14:12:55.994Z

Link: CVE-2026-43222

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-06T12:16:41.900

Modified: 2026-05-06T13:07:51.607

Link: CVE-2026-43222

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.