CVE-2019-9112
MEDIUMxiaomi_perseus-p-oss < 2018-11-26 - Integer Overflow in msm GPU Driver
Title source: llmDescription
The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000
Scores
CVSS v3
5.5
EPSS
0.0082
EPSS Percentile
52.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-190
Status
published
Products (1)
micode/xiaomi_perseus-p-oss
< 2018-11-26
Published
Feb 25, 2019
Tracked Since
Feb 18, 2026