Array Out-of-Bounds Vulnerability in MediaTek Video Codec on Linux Kernel

CVE-2023-53748

What is CVE-2023-53748?

A vulnerability exists in the MediaTek video codec within the Linux kernel that allows user-supplied values to potentially lead to array out-of-bounds access during the queue setup process. The variable *nplanes, which is provided via a system call, can be set to a value beyond the expected range, causing potential memory access violations. This issue arises when the number of planes specified exceeds the allowed values of 1-3, while *nplanes can take values from 1 to 8. A fix has been implemented to validate *nplanes against the permissible array size, thereby enhancing overall system security.

References