Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2022-2652

Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Description

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

umlaeute umlaeute/v4l2loopback

  • unspecified to < 0.12.6affected

References