CVE-2024-39471
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_i
CVSS
7.8
High
EPSS
0.2%
p15
KEV
—
Exploit Today
4
0-100
Published: Jun 25, 2024 · Last modified: Aug 4, 2026 · CWE-125
0.2%EPSS · 30 days0.2%
2026-07-292026-08-26
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return -EINVAL, the process should be stop to avoid out-of-bounds read, so directly return -EINVAL.
- git.kernel.orghttps://git.kernel.org/stable/c/011552f29f20842c9a7a21bffe1f6a2d6457ba46
- git.kernel.orghttps://git.kernel.org/stable/c/0964c84b93db7fbf74f357c1e20957850e092db3
- git.kernel.orghttps://git.kernel.org/stable/c/5594971e02764aa1c8210ffb838cb4e7897716e8
- git.kernel.orghttps://git.kernel.org/stable/c/5b0a3dc3e87821acb80e841b464d335aff242691
- git.kernel.orghttps://git.kernel.org/stable/c/8112fa72b7f139052843ff484130d6f97e9f052f
- git.kernel.orghttps://git.kernel.org/stable/c/8b2faf1a4f3b6c748c0da36cda865a226534d520
- git.kernel.orghttps://git.kernel.org/stable/c/ea906e9ac61e3152bef63597f2d9f4a812fc346a
- git.kernel.orghttps://git.kernel.org/stable/c/011552f29f20842c9a7a21bffe1f6a2d6457ba46
- git.kernel.orghttps://git.kernel.org/stable/c/0964c84b93db7fbf74f357c1e20957850e092db3
- git.kernel.orghttps://git.kernel.org/stable/c/5594971e02764aa1c8210ffb838cb4e7897716e8
- git.kernel.orghttps://git.kernel.org/stable/c/5b0a3dc3e87821acb80e841b464d335aff242691
- git.kernel.orghttps://git.kernel.org/stable/c/8112fa72b7f139052843ff484130d6f97e9f052f
- git.kernel.orghttps://git.kernel.org/stable/c/8b2faf1a4f3b6c748c0da36cda865a226534d520
- git.kernel.orghttps://git.kernel.org/stable/c/ea906e9ac61e3152bef63597f2d9f4a812fc346a
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-792396.5 MED6.9%
——2Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)2hCVE-2026-791126.5 MED6.9%
——2Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)23hCVE-2026-789899.6 CRI34.5%
——10Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-789788.8 HIG28.2%
——8Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)15hCVE-2026-615555.5 MED6.2%
——2OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::GetChannelsInMultiPartFile() processes a crafted EXR with an empty multiView header attribute and Imf::viewFromChannelName() indexes the empty vector for a dotless channel name. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.23hCVE-2026-167825.3 MED16.2%
——5A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.2d