CVE-2025-23157 media: venus: hfi_parser: add check to avoid out of bound access

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2025-23157 and CVE-2025-23158 Address Vulnerabilities in Media Processing CVE-2025-23157 and CVE-2025-23158 were published on May 1, 2025, addressing vulnerabilities in the media processing component of the Venus driver. CVE-2025-23157 involves an out-of-bounds access issue, while CVE-2025-23158 addresses incorrect queue size handling. These vulnerabilities could potentially affect systems utilizing the Venus driver. 2 sources 41