CVE-2008-3496 Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6...
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 2.6.26.1 | 2.6.26.1 |
References
- SUSE-SR:2008:018 mailing-list third-party-advisory vendor-advisory
- [linux-kernel] 20080730 [patch 40/62] V4L: uvcvideo: Fix a buffer overflow in format descriptor parsing mailing-list third-party-advisory
- 31982 third-party-advisory
- www.kernel.org release-notes vendor-advisory
- MDVSA-2008:223 third-party-advisory vendor-advisory
- 30514 third-party-advisory vdb-entry
- linux-kernel-uvcparseformat-bo(44184) third-party-advisory vdb-entry