Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()[EOL][EOL]The buffer length check before calling uvc_parse_format() only ensured[EOL]that the buffer has at least 3 bytes (buflen > 2), buf the function[EOL]accesses buffer[3], requiring at least 4 bytes.[EOL][EOL]This can lead to an out-of-bounds read if the buffer has exactly 3 bytes.[EOL][EOL]Fix it by checking that the buffer has at least 4 bytes in[EOL]uvc_parse_format().

CREATE(Triage):(User=admin) [CVE-2025-38680 (https://nvd.nist.gov/vuln/detail/CVE-2025-38680)