{"schema_version":"1.7.5","id":"CVE-2021-47046","published":"2024-02-28T09:15:40.277Z","modified":"2026-03-15T22:42:45.549269Z","related":["SUSE-SU-2024:1465-1","SUSE-SU-2024:1489-1"],"details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix off by one in hdmi_14_process_transaction()\n\nThe hdcp_i2c_offsets[] array did not have an entry for\nHDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE so it led to an off by one\nread overflow.  I added an entry and copied the 0x0 value for the offset\nfrom similar code in drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c.\n\nI also declared several of these arrays as having HDCP_MESSAGE_ID_MAX\nentries.  This doesn't change the code, but it's just a belt and\nsuspenders approach to try future proof the code.","affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47046.json","unresolved_ranges":[{"events":[{"introduced":"5.5"},{"fixed":"5.10.37"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.11.21"}]},{"events":[{"introduced":"5.12"},{"fixed":"5.12.4"}]}]}}],"references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/080bd41d6478a64edf96704fddcda52b1fd5fed7"},{"type":"FIX","url":"https://git.kernel.org/stable/c/403c4528e5887af3deb9838cb77a557631d1e138"},{"type":"FIX","url":"https://git.kernel.org/stable/c/6a58310d5d1e5b02d0fc9b393ba540c9367bced5"},{"type":"FIX","url":"https://git.kernel.org/stable/c/8e6fafd5a22e7a2eb216f5510db7aab54cc545c1"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}