CVE-2026-89724Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's `media: vicodec` component. An out-of-bounds write vulnerability exists in the FWHT encoder due to incorrect buffer sizing during video output format handling. This issue allows an attacker to cause c…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 6.3
none → medium
— → 6.3
none → medium
— → 7.8
none → high
7.8 → 6.3
high → medium
6.3 → 7.8
medium → high
Last analysed / modified upstream
7.8 → 5.5
high → medium
A flaw was found in the Linux kernel's media: vicodec component. An out-of-bounds write vulnerability exists in the FWHT encoder due to incorrect buffer sizing during video output format handling. This issue allows an attacker to cause corruption of adjacent kernel heap memory, which could lead to system instability or a denial of service.
kernel: media: vicodec: fix out-of-bounds write in FWHT encoder — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-15.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89585Medium· 5.5kernel: auxdisplay: charlcd: cancel backlight work on registration failure (CVE-2026-89585)
CVE-2026-89594Medium· 5.5kernel: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device (CVE-2026-89594)
CVE-2026-89597Medium· 5.5kernel: fbdev: uvesafb: unregister connector callback on init failure (CVE-2026-89597)
CVE-2026-13087High· 8.8A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c
CVE-2026-95508High· 7.4A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp
CVE-2026-92382Medium· 4.1An out-of-bounds write flaw was found in usbredir