CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2018-12-07

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Mi A2 Lite Firmware (Mi)
• Redmi 6 Firmware (Mi)

References

• https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972