CVEvulnerability

CVE-2019-9112

5.5 MEDIUM Published 2019-02-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-190

Description

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.

Affected configurations

• micode xiaomi perseus-p-oss (<= 2018-11-26)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References