Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 08:05 UTC

Critical in the last 24 hours

1601 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

181-70% vs 7-day avg of 598

2 critical, 65 high, 73 medium, 31 low

Expand	Severity	Score	Advisory	Title	Source	Flags	Published
	Unknown	n/a	CVE-2026-98882	In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's dec_output_info contains... Linux, Chips&MediaLinux, Linux kernel, Chips&Media wave5	NVD		Oct 23 12:18 UTC
CVE-2026-98882In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's dec_output_info contains... Executive summary A flaw in the Linux kernel's wave5 video decoder driver for Chips&Media hardware could let invalid data cause the driver to write outside a buffer. The advisory does not state a severity score or an exploitation status. The advisory shows a kernel stable-tree patch that adds a range check and does not describe other vendor recommendations. Technical summary The advisory describes a buffer overflow in wave5_vpu_dec_get_output_info in drivers/media/platform/chips-media/wave5/wave5-vpuapi.c, where an index derived from the driver's dec_output_info could exceed the bounds of inst->frame_buf (a smatch report cites a 64 versus 127 bound). The fix adds a check that the computed index is below MAX_REG_FRAME and returns -EINVAL with a WARN_ON otherwise. The attack vector and preconditions are not stated. Affected and fixed version numbers are not stated; the commit ID 144f24ec0fc1e51673611912a6d14ded0a61db43 is given. No workaround or detection guidance is stated, and no CVSS score is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/144f24ec0fc1e51…1912a6d14ded0a61db43 Score No CVSS score published. Affects Linux Chips&Media Linux Linux kernel Chips&Media wave5 NIST National Vulnerability DatabasePublished Oct 23, 2026 12:18 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Score

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee