CVEvulnerability

CVE-2022-2652

6.0 MEDIUM Published 2022-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CVSS 3.0 ([email protected])
7.3 HIGH — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
Weaknesses
CWE-134

Description

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Affected configurations

• v4l2loopback project v4l2loopback (< 0.12.6)

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References