cve/2024/CVE-2024-53197.md
2025-09-29 16:08:36 +00:00

1.1 KiB

CVE-2024-53197

Description

In the Linux kernel, the following vulnerability has been resolved:ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesA bogus device can provide a bNumConfigurations value that exceeds theinitial value used in usb_get_configuration for allocating dev->config.This can lead to out-of-bounds accesses later, e.g. inusb_destroy_configuration.

POC

Reference

No PoCs from references.

Github