In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006 | vendor advisory |