CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.
References
Link Resource
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:mi:mi_a2_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mi:mi_a2_lite:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:mi:redmi_6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mi:redmi_6:-:*:*:*:*:*:*:*

History

09 Dec 2022, 16:36

Type Values Removed Values Added
References (MISC) https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 - Third Party Advisory (MISC) https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 - Issue Tracking, Third Party Advisory

22 Sep 2022, 14:46

Type Values Removed Values Added
First Time Mi mi A2 Lite
Mi mi A2 Lite Firmware
Mi redmi 6
Mi
Mi redmi 6 Firmware
CPE cpe:2.3:h:xiaomi:mi_a2_lite:-:*:*:*:*:*:*:*
cpe:2.3:o:xiaomi:mi_a2_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:xiaomi:redmi_6:-:*:*:*:*:*:*:*
cpe:2.3:o:xiaomi:redmi_6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mi:mi_a2_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mi:mi_a2_lite:-:*:*:*:*:*:*:*
cpe:2.3:h:mi:redmi_6:-:*:*:*:*:*:*:*
cpe:2.3:o:mi:redmi_6_firmware:*:*:*:*:*:*:*:*

Information

Published : 2018-12-07 09:29

Updated : 2023-12-10 12:44


NVD link : CVE-2018-19939

Mitre link : CVE-2018-19939

CVE.ORG link : CVE-2018-19939


JSON object : View

Products Affected

mi

  • redmi_6_firmware
  • redmi_6
  • mi_a2_lite_firmware
  • mi_a2_lite
CWE
CWE-476

NULL Pointer Dereference