Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2025-02-05 — agencies required to remediate by 2025-02-26

CVE-2024-53104

HIGH

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

Also known asA-378455392ASB-A-378455392
Published
Dec 2, 2024
Updated
Apr 2, 2026
Affected
0 pkgs
Patched
None yet
Exploits
None indexed

EPSS Exploitation Probability

via FIRST.org ↗
18.0%probability of exploitation in next 30 days
Moderate Risk95th percentile0.00%
7.67%11.9%16.2%20.4%12.0%18.0%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Frequently Asked Questions

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.
O3 Security · Impact-Aware SCA

Is CVE-2024-53104 in your stack?

O3 detects CVE-2024-53104 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.

Scan my stack How O3 SCA works