{"id":"CVE-2026-46199","title":"drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 88411caee8f576d6b5abf6531232fcc0ce756dc5","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < c72a8b4dc6d598e3831ef3abd9c6527dfbf4810e","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 7688143ca62edeecacb3ba0a2cea129dbd262a18","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 63b51e8a9d54317d31cc3856c1e12407070d5fc2","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 3c817a60b09eaab926e475088e750936efcc95ae","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T15:21:02.273163Z"},"published":"2026-05-28","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:31:07.631Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46199","references":[{"url":"https://git.kernel.org/stable/c/88411caee8f576d6b5abf6531232fcc0ce756dc5"},{"url":"https://git.kernel.org/stable/c/c72a8b4dc6d598e3831ef3abd9c6527dfbf4810e"},{"url":"https://git.kernel.org/stable/c/7688143ca62edeecacb3ba0a2cea129dbd262a18"},{"url":"https://git.kernel.org/stable/c/63b51e8a9d54317d31cc3856c1e12407070d5fc2"},{"url":"https://git.kernel.org/stable/c/3c817a60b09eaab926e475088e750936efcc95ae"},{"url":"https://git.kernel.org/stable/c/0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648"}],"tags":["cve.org"],"epss":0.00131,"epssPercentile":0.02419,"ingestedAt":"2026-10-16T17:24:46.712Z","slug":"CVE-2026-46199","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.\n\n## Affected\n\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 88411caee8f576d6b5abf6531232fcc0ce756dc5`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < c72a8b4dc6d598e3831ef3abd9c6527dfbf4810e`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 7688143ca62edeecacb3ba0a2cea129dbd262a18`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 63b51e8a9d54317d31cc3856c1e12407070d5fc2`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 3c817a60b09eaab926e475088e750936efcc95ae`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}