CVE-2026-97579

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Sep 25, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound the copy to the array capacity.

Affected packages

Ecosystem	Package	Introduced	Fixed