CVE-2026-97579
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound the copy to the array capacity.
- Published Sep 25, 2026
- CVSS 7.8 high
- 0.2% chance of exploitation in the next 30 days (EPSS)
- A fix is available