Linux Kernel Out-of-Bounds Access Vulnerability in Media Venus HFI Parser

A vulnerability in the Linux kernel's media subsystem, specifically within the Venus HFI parser, has been addressed. The issue arose because the 'init_codecs' function could be called multiple times with manipulated payloads from video firmware. This could lead to the 'codecs_count' exceeding the maximum allowed number, causing an out-of-bounds access. The vulnerability has been mitigated by resetting the count to ensure it starts from the beginning.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, which may cause memory corruption or allow for arbitrary code execution.