CVE - CVE-2024-49969

CVE-ID
CVE-2024-49969	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_hw_format` function in the DCN30 color management module. The issue could occur when the index 'i' exceeds the number of transfer function points (TRANSFER_FUNC_POINTS). The fix adds a check to ensure 'i' is within bounds before accessing the transfer function points. If 'i' is out of bounds, the function returns false to indicate an error. drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:180 cm3_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.red' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:181 cm3_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.green' 1025 <= s32max drivers/gpu/drm/amd/amdgpu/../display/dc/dcn30/dcn30_cm_common.c:182 cm3_helper_translate_curve_to_hw_format() error: buffer overflow 'output_tf->tf_pts.blue' 1025 <= s32max
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0f1e222a4b41d77c442901d166fbdca967af0d86 URL:https://git.kernel.org/stable/c/0f1e222a4b41d77c442901d166fbdca967af0d86 MISC:https://git.kernel.org/stable/c/578422ddae3d13362b64e77ef9bab98780641631 URL:https://git.kernel.org/stable/c/578422ddae3d13362b64e77ef9bab98780641631 MISC:https://git.kernel.org/stable/c/7ab69af56a23859b647dee69fa1052c689343621 URL:https://git.kernel.org/stable/c/7ab69af56a23859b647dee69fa1052c689343621 MISC:https://git.kernel.org/stable/c/929506d5671419cffd8d01e9a7f5eae53682a838 URL:https://git.kernel.org/stable/c/929506d5671419cffd8d01e9a7f5eae53682a838 MISC:https://git.kernel.org/stable/c/b9d8b94ec7e67f0cae228c054f77b73967c389a3 URL:https://git.kernel.org/stable/c/b9d8b94ec7e67f0cae228c054f77b73967c389a3 MISC:https://git.kernel.org/stable/c/c13f9c62015c56a938304cef6d507227ea3e0039 URL:https://git.kernel.org/stable/c/c13f9c62015c56a938304cef6d507227ea3e0039 MISC:https://git.kernel.org/stable/c/d81873f9e715b72d4f8d391c8eb243946f784dfc URL:https://git.kernel.org/stable/c/d81873f9e715b72d4f8d391c8eb243946f784dfc
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)