Approved changes feed: RSS · Atom

cpe:2.3:o:v4l2loopback_project:v4l2loopback:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorV4L2Loopback Project (ab73eb1e-ce67-5f05-87da-4d6bc225733e)
ProductV4L2Loopback (92f8160e-6e49-5405-bb45-f79afbe5ec6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/v4l2loopback purl2cpe 2026-06-01 10:13:46.957619
pkg:deb/ubuntu/v4l2loopback purl2cpe 2026-06-01 10:13:46.957623
pkg:github/johnweber/v4l2loopback purl2cpe 2026-06-01 10:13:46.957627
pkg:github/pop-os/v4l2loopback purl2cpe 2026-06-01 10:13:46.957630
pkg:github/umlaeute/v4l2loopback purl2cpe 2026-06-01 10:13:46.957634
pkg:rpm/opensuse/v4l2loopback purl2cpe 2026-06-01 10:13:46.957637

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2652 vulnerable 2026-06-08 05:43:35.962376 Use of Externally-Controlled Format String in umlaeute/v4l2loopback
HIGH (7.3)
Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
Published: 2022-08-04T09:35:37.000Z
Updated: 2024-08-03T00:46:03.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.