Bug 2373586 (CVE-2022-50182) - CVE-2022-50182 kernel: media: imx-jpeg: Align upwards buffer size
Summary: CVE-2022-50182 kernel: media: imx-jpeg: Align upwards buffer size
Keywords:
Status: NEW
Alias: CVE-2022-50182
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-06-18 12:09 UTC by OSIDB Bzimport
Modified: 2025-06-19 08:34 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-06-18 12:09:30 UTC
In the Linux kernel, the following vulnerability has been resolved:

media: imx-jpeg: Align upwards buffer size

The hardware can support any image size WxH,
with arbitrary W (image width) and H (image height) dimensions.

Align upwards buffer size for both encoder and decoder.
and leave the picture resolution unchanged.

For decoder, the risk of memory out of bounds can be avoided.
For both encoder and decoder, the driver will lift the limitation of
resolution alignment.

For example, the decoder can support jpeg whose resolution is 227x149
the encoder can support nv12 1080P, won't change it to 1920x1072.

Comment 1 Avinash Hanwate 2025-06-19 08:25:55 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025061833-CVE-2022-50182-c355@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.