This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2022-2652 | BDVDB-2026-181516 Detail

umlaeuteumlaeute/v4l2loopback

Description#

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Impact#

Per CVSS v3.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-134 Use of Externally-Controlled Format String

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.