cve.bz

CVE-2024-53104

7.8 highKEVEPSS 3.4%

High (7.8) in Linux Kernel. In CISA KEV since 2025-02-05. EPSS 3.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2025-02-05, due 2025-02-26
CWE
CWE-787
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON