CVE-2026-68229 (GCVE-0-2026-68229)

Vulnerability from cvelistv5 – Published: 2026-08-10 12:00 – Updated: 2026-08-19 16:32
VLAI
Title
media: cedrus: skip invalid H.264 reference list entries
Summary
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the stateless slice control and later uses their indices to look up decode->dpb[] in _cedrus_write_ref_list(). Rejecting such controls in cedrus_try_ctrl() would break existing userspace, since stateless H.264 reference lists may legitimately carry out-of-range indices for missing references. Instead, guard the actual DPB lookup in Cedrus and skip entries whose indices do not fit the fixed V4L2_H264_NUM_DPB_ENTRIES array. This keeps the fix local to the driver use site and avoids out-of-bounds reads from malformed or unsupported reference list entries.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < a6a109771c51920beb620f30778c29da823cc34c (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 1db34683b0fbbcb3bc162380c11514ea0a44e8ab (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 0af8945fcae742d099f59f3c725eb67235953a31 (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 9924cb548ee7753a6473997949c3ec48092de0b0 (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < e53112c2de88982e66c369aee2120d5efd78df30 (git)
Affected: e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c , < 10358ea986c3c85516d1c8206486464f79d36e76 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.10
Unaffected: 0 , < 5.10 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/media/sunxi/cedrus/cedrus_h264.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a6a109771c51920beb620f30778c29da823cc34c",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "1db34683b0fbbcb3bc162380c11514ea0a44e8ab",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "0af8945fcae742d099f59f3c725eb67235953a31",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "9924cb548ee7753a6473997949c3ec48092de0b0",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "e53112c2de88982e66c369aee2120d5efd78df30",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            },
            {
              "lessThan": "10358ea986c3c85516d1c8206486464f79d36e76",
              "status": "affected",
              "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/media/sunxi/cedrus/cedrus_h264.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.10"
            },
            {
              "lessThan": "5.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cedrus: skip invalid H.264 reference list entries\n\nCedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the\nstateless slice control and later uses their indices to look up\ndecode-\u003edpb[] in _cedrus_write_ref_list().\n\nRejecting such controls in cedrus_try_ctrl() would break existing\nuserspace, since stateless H.264 reference lists may legitimately carry\nout-of-range indices for missing references. Instead, guard the actual\nDPB lookup in Cedrus and skip entries whose indices do not fit the fixed\nV4L2_H264_NUM_DPB_ENTRIES array.\n\nThis keeps the fix local to the driver use site and avoids out-of-bounds\nreads from malformed or unsupported reference list entries."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only through the local V4L2 interface on the cedrus video device node (/dev/videoN) via VIDIOC_S_EXT_CTRLS plus QBUF/STREAMON ioctls. There is no remote or network-facing path to the stateless H.264 decoder.\nAC:L - The attacker fully and deterministically controls the out-of-range value: ref_pic_list0/1[i].index is a u8 copied verbatim from the control payload with no validation, so any index in 16..255 immediately produces the out-of-bounds dpb[] access on the next decode run. No race, timing, or uncontrollable memory-layout condition is involved.\nPR:L - Only an unprivileged local account with access to the cedrus video device node is needed (typically the \u0027video\u0027 group, or the media/camera service on Android and embedded Allwinner devices). No capability, CAP_SYS_ADMIN, or root check exists anywhere on the path \u2014 cedrus_try_ctrl() validates only SPS chroma format and bit depth.\nUI:N - The attacking process performs the entire sequence itself \u2014 open the device, set the crafted H.264 slice-params control, queue buffers, start streaming. No victim action, file open, or media mount is required.\nS:U - The out-of-bounds read stays within the kernel\u0027s own memory and security authority; no VM, IOMMU, or sandbox boundary is crossed. This is a standard in-kernel driver memory-safety defect.\nC:H - decode-\u003edpb[] holds 16 32-byte entries at the start of a ~560-byte control allocation, so an attacker-chosen index up to 255 reads at offset 8160 \u2014 about 7.6 KB of adjacent kernel heap beyond the object. The read flags/reference_ts values are consumed by the ACTIVE test and vb2_find_buffer() timestamp lookup, giving an attacker-steerable oracle over unrelated kernel heap contents.\nI:N - The defect is purely a read: num_ref is bounded to V4L2_H264_REF_LIST_LEN by v4l2-ctrls-core.c, so the sram_array[CEDRUS_MAX_REF_IDX] stores stay in bounds, and only a legitimately-looked-up buffer position is written to hardware SRAM. No kernel memory is modified out of bounds.\nA:H - Reading several kilobytes past the end of a slab object can walk off the slab page into an unmapped or poisoned region, and trips KASAN/hardening checks, producing a kernel oops. The trigger is trivially repeatable from an unprivileged process, so the crash can be induced at will."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:32:01.546Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a6a109771c51920beb620f30778c29da823cc34c"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1db34683b0fbbcb3bc162380c11514ea0a44e8ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a"
        },
        {
          "url": "https://git.kernel.org/stable/c/0af8945fcae742d099f59f3c725eb67235953a31"
        },
        {
          "url": "https://git.kernel.org/stable/c/9924cb548ee7753a6473997949c3ec48092de0b0"
        },
        {
          "url": "https://git.kernel.org/stable/c/e53112c2de88982e66c369aee2120d5efd78df30"
        },
        {
          "url": "https://git.kernel.org/stable/c/10358ea986c3c85516d1c8206486464f79d36e76"
        }
      ],
      "title": "media: cedrus: skip invalid H.264 reference list entries",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68229",
    "datePublished": "2026-08-10T12:00:51.935Z",
    "dateReserved": "2026-07-30T09:28:09.376Z",
    "dateUpdated": "2026-08-19T16:32:01.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68229",
      "date": "2026-09-20",
      "epss": "0.0016",
      "percentile": "0.05586"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/staging/media/sunxi/cedrus/cedrus_h264.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "a6a109771c51920beb620f30778c29da823cc34c",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1db34683b0fbbcb3bc162380c11514ea0a44e8ab",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "0af8945fcae742d099f59f3c725eb67235953a31",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9924cb548ee7753a6473997949c3ec48092de0b0",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e53112c2de88982e66c369aee2120d5efd78df30",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "10358ea986c3c85516d1c8206486464f79d36e76",
                    "status": "affected",
                    "version": "e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/staging/media/sunxi/cedrus/cedrus_h264.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.10"
                  },
                  {
                    "lessThan": "5.10",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.265",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.216",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.183",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.148",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.101",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.42",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cedrus: skip invalid H.264 reference list entries\n\nCedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the\nstateless slice control and later uses their indices to look up\ndecode-\u003edpb[] in _cedrus_write_ref_list().\n\nRejecting such controls in cedrus_try_ctrl() would break existing\nuserspace, since stateless H.264 reference lists may legitimately carry\nout-of-range indices for missing references. Instead, guard the actual\nDPB lookup in Cedrus and skip entries whose indices do not fit the fixed\nV4L2_H264_NUM_DPB_ENTRIES array.\n\nThis keeps the fix local to the driver use site and avoids out-of-bounds\nreads from malformed or unsupported reference list entries."
          }
        ],
        "id": "CVE-2026-68229",
        "lastModified": "2026-08-19T17:20:38.647",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-10T13:20:11.123",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/0af8945fcae742d099f59f3c725eb67235953a31"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/10358ea986c3c85516d1c8206486464f79d36e76"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1db34683b0fbbcb3bc162380c11514ea0a44e8ab"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9924cb548ee7753a6473997949c3ec48092de0b0"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a6a109771c51920beb620f30778c29da823cc34c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e53112c2de88982e66c369aee2120d5efd78df30"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:19:19+00:00",
      "cve": "CVE-2026-68229",
      "id": "CVE-2026-68229",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_not_affected": "277",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: media: cedrus: skip invalid H.264 reference list entries",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68229.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:33:47Z",
      "cve": "CVE-2026-68229",
      "id": "CVE-2026-68229",
      "initial_release_date": "2026-08-21T00:44:46Z",
      "product_status:known_affected": "595",
      "product_status:known_not_affected": "153",
      "product_status:recommended": "107",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68229",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68229.json",
      "version": "8"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.