A buffer overflow was identified in the amlogic-c3 media driver for the Linux kernel. The vulnerability arises when the number of zones in the auto‑exposure (AE) or auto‑white‑balance (AWB) configuration exceeds the provided zone weight array, allowing an attacker to write beyond the bounds of the configuration structure. If successful, this memory corruption could enable execution of arbitrary code within kernel space, granting elevated privileges. The flaw is a classic out‑of‑bounds write (CWE‑119), correcting a smatch reported buffer overflow in the source files c3-isp-params.c.

The issue affects any Linux system running a kernel that includes the amlogic‑c3 media driver, such as devices using Amlogic C3 SoCs. No specific vendor or product version is listed, but all Linux kernel installations that provide this driver are potentially impacted.

Because the vulnerability requires manipulation of AE/AWB configuration data, the most probable attack vector is local or via a privileged user that can control the media subsystem. The EPSS score is not available, and the flaw is not listed in CISA KEV, indicating no confirmed widespread exploitation. Nonetheless, as a kernel buffer overflow, the risk of exploitation remains high if an attacker gains control of the media driver input path. Prompt patching is recommended to mitigate this risk.