CVE-2022-2652 | BDVDB-2026-181516 Detail
umlaeuteumlaeute/v4l2loopback
Description#
Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-134 Use of Externally-Controlled Format String
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.