CVE-2022-50182
media: imx-jpeg: Align upwards buffer size
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Align upwards buffer size The hardware can support any image size WxH, with arbitrary W (image width) and H (image height) dimensions. Align upwards buffer size for both encoder and decoder. and leave the picture resolution unchanged. For decoder, the risk of memory out of bounds can be avoided. For both encoder and decoder, the driver will lift the limitation of resolution alignment. For example, the decoder can support jpeg whose resolution is 227x149 the encoder can support nv12 1080P, won't change it to 1920x1072.
Timeline
ID reserved
By Linux
Published
- 14 months later
· 14 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.26% · top 82% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 2db16c6ed72ce644d5639b3ed15e5817442db4ba – < 9ae2d729de6350c53a06c57782751d84eb2c08d9
- affected 2db16c6ed72ce644d5639b3ed15e5817442db4ba – < 73d1836ed7911953182b787745cb8c5857a2661c
- affected 2db16c6ed72ce644d5639b3ed15e5817442db4ba – < 447795ffb17cd60bb544e0abfc9399e180a14a2f
- affected 2db16c6ed72ce644d5639b3ed15e5817442db4ba – < 9e7aa76cdb02923ee23a0ddd48f38bdc3512f92b
- affected 5.13
- unaffected < 5.13
- unaffected 5.15.61 – ≤ 5.15.*
- unaffected 5.18.18 – ≤ 5.18.*
- unaffected 5.19.2 – ≤ 5.19.*
- unaffected 6.0 – ≤ *
References (4)
- https://git.kernel.org/stable/c/9ae2d729de6350c53a06c57782751d84eb2c08d9 (opens in a new tab)
- https://git.kernel.org/stable/c/73d1836ed7911953182b787745cb8c5857a2661c (opens in a new tab)
- https://git.kernel.org/stable/c/447795ffb17cd60bb544e0abfc9399e180a14a2f (opens in a new tab)
- https://git.kernel.org/stable/c/9e7aa76cdb02923ee23a0ddd48f38bdc3512f92b (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50182)Record last updated .