The cam_get_device_priv function does not check the type... · CVE-2023-28575 · GitHub Advisory Database · GitHub

The cam_get_device_priv function does not check the type...

High severity Unreviewed Published Aug 8, 2023 to the GitHub Advisory Database • Updated Apr 12, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

References

Published by the National Vulnerability Database

Aug 8, 2023

Published to the GitHub Advisory Database Aug 8, 2023

Last updated Apr 12, 2024

Weaknesses

CWE-823

Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. Learn more on MITRE.

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. Learn more on MITRE.