Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-20787

Опубликовано: 25 фев. 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 7.1
EPSS Низкий

Описание

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbg_write in drivers/input/touchscreen/ft5x46/ft5x46_ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:micode:xiaomi_perseus-p-oss:*:*:*:*:*:*:*:*
Версия до 2018-11-26 (включая)

EPSS

Процентиль: 36%
0.00149
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbg_write in drivers/input/touchscreen/ft5x46/ft5x46_ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.

EPSS

Процентиль: 36%
0.00149
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-190