The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.
References
Link | Resource |
---|---|
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 | Issue Tracking Third Party Advisory |
Configurations
History
09 Dec 2022, 16:36
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 - Issue Tracking, Third Party Advisory |
22 Sep 2022, 14:46
Type | Values Removed | Values Added |
---|---|---|
First Time |
Mi mi A2 Lite
Mi mi A2 Lite Firmware Mi redmi 6 Mi Mi redmi 6 Firmware |
|
CPE | cpe:2.3:o:xiaomi:mi_a2_lite_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:xiaomi:redmi_6:-:*:*:*:*:*:*:* cpe:2.3:o:xiaomi:redmi_6_firmware:*:*:*:*:*:*:*:* |
cpe:2.3:o:mi:mi_a2_lite_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:mi:mi_a2_lite:-:*:*:*:*:*:*:* cpe:2.3:h:mi:redmi_6:-:*:*:*:*:*:*:* cpe:2.3:o:mi:redmi_6_firmware:*:*:*:*:*:*:*:* |
Information
Published : 2018-12-07 09:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-19939
Mitre link : CVE-2018-19939
CVE.ORG link : CVE-2018-19939
JSON object : View
Products Affected
mi
- redmi_6_firmware
- redmi_6
- mi_a2_lite_firmware
- mi_a2_lite
CWE
CWE-476
NULL Pointer Dereference