CVE-2024-53061 (GCVE-0-2024-53061)

Vulnerability from cvelistv5 – Published: 2024-11-19 17:22 – Updated: 2026-08-05 11:43
VLAI
Title
media: s5p-jpeg: prevent buffer overflows
Summary
In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment.
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-191 - Integer Underflow (Wrap or Wraparound)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < c5f6fefcda8fac8f082b6c5bf416567f4e100c51 (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < a930cddfd153b5d4401df0c01effa14c831ff21e (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < c85db2d4432de4ff9d97006691ce2dcb5bda660e (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < 784bc785a453eb2f8433dd62075befdfa1b2d6fd (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < c951a0859fdacf49a2298b5551a7e52b95ff6f51 (git)
Affected: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4 , < 14a22762c3daeac59a5a534e124acbb4d7a79b3a (git)
Create a notification for this product.
Linux Linux Affected: 4.4
Unaffected: 0 , < 4.4 (semver)
Unaffected: 4.19.324 , ≤ 4.19.* (semver)
Unaffected: 5.4.286 , ≤ 5.4.* (semver)
Unaffected: 5.10.230 , ≤ 5.10.* (semver)
Unaffected: 5.15.172 , ≤ 5.15.* (semver)
Unaffected: 6.1.117 , ≤ 6.1.* (semver)
Unaffected: 6.6.61 , ≤ 6.6.* (semver)
Unaffected: 6.11.8 , ≤ 6.11.* (semver)
Unaffected: 6.12 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53061",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T01:39:25.933440Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-191",
                "description": "CWE-191 Integer Underflow (Wrap or Wraparound)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T17:53:49.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:28:56.360Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c5f6fefcda8fac8f082b6c5bf416567f4e100c51",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "a930cddfd153b5d4401df0c01effa14c831ff21e",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "c85db2d4432de4ff9d97006691ce2dcb5bda660e",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "784bc785a453eb2f8433dd62075befdfa1b2d6fd",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "c951a0859fdacf49a2298b5551a7e52b95ff6f51",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "14a22762c3daeac59a5a534e124acbb4d7a79b3a",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.324",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.286",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.230",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.172",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.117",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.324",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.286",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.230",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.172",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.117",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.61",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.8",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: s5p-jpeg: prevent buffer overflows\n\nThe current logic allows word to be less than 2. If this happens,\nthere will be buffer overflows, as reported by smatch. Add extra\nchecks to prevent it.\n\nWhile here, remove an unused word = 0 assignment."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires opening the s5p-jpeg V4L2 M2M device node (/dev/videoN) and issuing a local S_FMT/REQBUFS/QBUF/STREAMON ioctl sequence with a crafted JPEG in the OUTPUT buffer. There is no network-facing path to the parser.\nAC:L - The attacker fully controls every byte of the JPEG header; setting a DHT/DQT/SOF0 or SOS length field to 0x0000 deterministically produces the integer underflow with no race, timing, or memory-layout precondition. Reaching device_run only requires an otherwise well-formed header with a valid SOF/SOS and subsampling value.\nPR:L - An unprivileged local account with access to /dev/video* is sufficient \u2014 udev/logind grant seat users this ACL on desktop and embedded Linux, and on Android Exynos devices the camera/media UID reaches it. No CAP_SYS_ADMIN or root is needed.\nUI:N - The attacker performs the entire QBUF/STREAMON sequence itself against a device node it opened; no victim action, file open, or mount is involved.\nS:U - The out-of-bounds access and the resulting crash are confined to the kernel\u0027s own security authority on the same host; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The underflowed size permits an effectively unbounded (up to ~4 GiB) out-of-bounds read past the vb2 dma-contig buffer, far beyond \"a few bytes\". Those kernel bytes are loaded into the JPEG IP\u0027s quantization/Huffman table registers, and since dequantized coefficients are coeff \u00d7 qtbl[k], a crafted entropy-coded stream leaks them back to userspace in the decoded CAPTURE buffer at an attacker-chosen offset.\nI:L - Out-of-bounds data drives writel() to attacker-influenced offsets past the intended Huffman-table register windows, corrupting JPEG IP state and the decoded output returned to userspace. The writes stay within the 64 KB ioremap window and cannot reach the DMA base-address registers, so there is no kernel-memory or arbitrary-write primitive.\nA:H - Sequentially reading gigabytes past a dma-contig allocation will hit unmapped or non-RAM addresses, and the parsers run under spin_lock_irqsave() in exynos4_jpeg_device_run() with interrupts disabled, so the fault becomes an oops/panic in atomic context. The condition is trivially and repeatedly triggerable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:43:24.079Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51"
        },
        {
          "url": "https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e"
        },
        {
          "url": "https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e"
        },
        {
          "url": "https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51"
        },
        {
          "url": "https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a"
        }
      ],
      "title": "media: s5p-jpeg: prevent buffer overflows",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53061",
    "datePublished": "2024-11-19T17:22:32.189Z",
    "dateReserved": "2024-11-19T17:17:24.975Z",
    "dateUpdated": "2026-08-05T11:43:24.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53061",
      "date": "2026-08-07",
      "epss": "0.00305",
      "percentile": "0.2277"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.4\", \"versionEndExcluding\": \"4.19.324\", \"matchCriteriaId\": \"304E5368-E4DF-4277-9ACF-AB3ADEB91CA4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.286\", \"matchCriteriaId\": \"9952C897-8A61-4D4B-9D6D-7D063E9EA15E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.230\", \"matchCriteriaId\": \"BF5B32D0-72C9-41C3-A0BB-D4946153C134\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.172\", \"matchCriteriaId\": \"88812664-4296-42AC-AE0F-ED71086C1BB1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.117\", \"matchCriteriaId\": \"0DD7F755-2F6B-4707-8973-78496AD5AA8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.61\", \"matchCriteriaId\": \"630ED7EB-C97E-4435-B884-1E309E40D6F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.11.8\", \"matchCriteriaId\": \"0BD000F7-3DAD-4DD3-8906-98EA1EC67E95\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F361E1D-580F-4A2D-A509-7615F73167A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"925478D0-3E3D-4E6F-ACD5-09F28D5DF82C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C95E234-D335-4B6C-96BF-E2CEBD8654ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0F717D8-3014-4F84-8086-0124B2111379\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*\", \"matchCriteriaId\": \"24DBE6C7-2AAE-4818-AED2-E131F153D2FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*\", \"matchCriteriaId\": \"24B88717-53F5-42AA-9B72-14C707639E3F\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: s5p-jpeg: prevent buffer overflows\\n\\nThe current logic allows word to be less than 2. If this happens,\\nthere will be buffer overflows, as reported by smatch. Add extra\\nchecks to prevent it.\\n\\nWhile here, remove an unused word = 0 assignment.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: s5p-jpeg: evitar desbordamientos de b\\u00fafer La l\\u00f3gica actual permite que word sea menor que 2. Si esto sucede, habr\\u00e1 desbordamientos de b\\u00fafer, como lo informa smatch. Agregue verificaciones adicionales para evitarlo. Mientras est\\u00e9 aqu\\u00ed, elimine una asignaci\\u00f3n word = 0 sin usar.\"}]",
      "id": "CVE-2024-53061",
      "lastModified": "2024-11-22T17:51:45.817",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2024-11-19T18:15:25.997",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-191\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53061\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-11-19T18:15:25.997\",\"lastModified\":\"2026-08-04T11:21:46.753\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: s5p-jpeg: prevent buffer overflows\\n\\nThe current logic allows word to be less than 2. If this happens,\\nthere will be buffer overflows, as reported by smatch. Add extra\\nchecks to prevent it.\\n\\nWhile here, remove an unused word = 0 assignment.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: s5p-jpeg: evitar desbordamientos de b\u00fafer La l\u00f3gica actual permite que word sea menor que 2. Si esto sucede, habr\u00e1 desbordamientos de b\u00fafer, como lo informa smatch. Agregue verificaciones adicionales para evitarlo. Mientras est\u00e9 aqu\u00ed, elimine una asignaci\u00f3n word = 0 sin usar.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"c5f6fefcda8fac8f082b6c5bf416567f4e100c51\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"a930cddfd153b5d4401df0c01effa14c831ff21e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"c85db2d4432de4ff9d97006691ce2dcb5bda660e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"784bc785a453eb2f8433dd62075befdfa1b2d6fd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"c951a0859fdacf49a2298b5551a7e52b95ff6f51\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\",\"lessThan\":\"14a22762c3daeac59a5a534e124acbb4d7a79b3a\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.324\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.286\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.230\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.172\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.117\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.61\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.8\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-03-13T01:39:25.933440Z\",\"id\":\"CVE-2024-53061\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-191\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-191\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4\",\"versionEndExcluding\":\"4.19.324\",\"matchCriteriaId\":\"304E5368-E4DF-4277-9ACF-AB3ADEB91CA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.286\",\"matchCriteriaId\":\"9952C897-8A61-4D4B-9D6D-7D063E9EA15E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.230\",\"matchCriteriaId\":\"BF5B32D0-72C9-41C3-A0BB-D4946153C134\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.172\",\"matchCriteriaId\":\"88812664-4296-42AC-AE0F-ED71086C1BB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.117\",\"matchCriteriaId\":\"0DD7F755-2F6B-4707-8973-78496AD5AA8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.61\",\"matchCriteriaId\":\"630ED7EB-C97E-4435-B884-1E309E40D6F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.8\",\"matchCriteriaId\":\"0BD000F7-3DAD-4DD3-8906-98EA1EC67E95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F361E1D-580F-4A2D-A509-7615F73167A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"925478D0-3E3D-4E6F-ACD5-09F28D5DF82C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C95E234-D335-4B6C-96BF-E2CEBD8654ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0F717D8-3014-4F84-8086-0124B2111379\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"24DBE6C7-2AAE-4818-AED2-E131F153D2FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"24B88717-53F5-42AA-9B72-14C707639E3F\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T14:18:25+00:00",
      "cve": "CVE-2024-53061",
      "id": "CVE-2024-53061",
      "initial_release_date": "2024-11-19T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: media: s5p-jpeg: prevent buffer overflows",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53061.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-07-25T01:24:11Z",
      "cve": "CVE-2024-53061",
      "id": "CVE-2024-53061",
      "initial_release_date": "2024-11-20T03:49:00Z",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "80",
      "product_status:recommended": "870",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-53061",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-53061.json",
      "version": "58"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:28:56.360Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53061\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-03-13T01:39:25.933440Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-191\", \"description\": \"CWE-191 Integer Underflow (Wrap or Wraparound)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-18T16:03:49.000Z\"}}], \"cna\": {\"title\": \"media: s5p-jpeg: prevent buffer overflows\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - Exploitation requires opening the s5p-jpeg V4L2 M2M device node (/dev/videoN) and issuing a local S_FMT/REQBUFS/QBUF/STREAMON ioctl sequence with a crafted JPEG in the OUTPUT buffer. There is no network-facing path to the parser.\\nAC:L - The attacker fully controls every byte of the JPEG header; setting a DHT/DQT/SOF0 or SOS length field to 0x0000 deterministically produces the integer underflow with no race, timing, or memory-layout precondition. Reaching device_run only requires an otherwise well-formed header with a valid SOF/SOS and subsampling value.\\nPR:L - An unprivileged local account with access to /dev/video* is sufficient \\u2014 udev/logind grant seat users this ACL on desktop and embedded Linux, and on Android Exynos devices the camera/media UID reaches it. No CAP_SYS_ADMIN or root is needed.\\nUI:N - The attacker performs the entire QBUF/STREAMON sequence itself against a device node it opened; no victim action, file open, or mount is involved.\\nS:U - The out-of-bounds access and the resulting crash are confined to the kernel\u0027s own security authority on the same host; no VM, IOMMU, or sandbox boundary is crossed.\\nC:H - The underflowed size permits an effectively unbounded (up to ~4 GiB) out-of-bounds read past the vb2 dma-contig buffer, far beyond \\\"a few bytes\\\". Those kernel bytes are loaded into the JPEG IP\u0027s quantization/Huffman table registers, and since dequantized coefficients are coeff \\u00d7 qtbl[k], a crafted entropy-coded stream leaks them back to userspace in the decoded CAPTURE buffer at an attacker-chosen offset.\\nI:L - Out-of-bounds data drives writel() to attacker-influenced offsets past the intended Huffman-table register windows, corrupting JPEG IP state and the decoded output returned to userspace. The writes stay within the 64 KB ioremap window and cannot reach the DMA base-address registers, so there is no kernel-memory or arbitrary-write primitive.\\nA:H - Sequentially reading gigabytes past a dma-contig allocation will hit unmapped or non-RAM addresses, and the parsers run under spin_lock_irqsave() in exynos4_jpeg_device_run() with interrupts disabled, so the fault becomes an oops/panic in atomic context. The condition is trivially and repeatedly triggerable.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"c5f6fefcda8fac8f082b6c5bf416567f4e100c51\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"a930cddfd153b5d4401df0c01effa14c831ff21e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"c85db2d4432de4ff9d97006691ce2dcb5bda660e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"784bc785a453eb2f8433dd62075befdfa1b2d6fd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"c951a0859fdacf49a2298b5551a7e52b95ff6f51\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4\", \"lessThan\": \"14a22762c3daeac59a5a534e124acbb4d7a79b3a\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.4\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.4\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.324\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.286\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.230\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.172\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.117\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.61\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.8\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51\"}, {\"url\": \"https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b\"}, {\"url\": \"https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef\"}, {\"url\": \"https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e\"}, {\"url\": \"https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e\"}, {\"url\": \"https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd\"}, {\"url\": \"https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51\"}, {\"url\": \"https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmedia: s5p-jpeg: prevent buffer overflows\\n\\nThe current logic allows word to be less than 2. If this happens,\\nthere will be buffer overflows, as reported by smatch. Add extra\\nchecks to prevent it.\\n\\nWhile here, remove an unused word = 0 assignment.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.324\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.286\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.230\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.172\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.117\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.61\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.8\", \"versionStartIncluding\": \"4.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"4.4\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:43:24.079Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53061\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:43:24.079Z\", \"dateReserved\": \"2024-11-19T17:17:24.975Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-11-19T17:22:32.189Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.