CVE-2018-20787: Integer Overflow

Q: What is the severity of CVE-2018-20787?

CVE-2018-20787 has a severity rating of high with a CVSS score of 7.1.

Q: What are the potential impacts of CVE-2018-20787?

The potential impacts of CVE-2018-20787 include a device crash due to an integer overflow.

Q: How can I fix CVE-2018-20787?

Fixing CVE-2018-20787 involves updating the ft5x46 touchscreen driver to ensure proper checks on size arguments.

Q: Who is affected by CVE-2018-20787?

CVE-2018-20787 affects devices running custom Linux kernels, specifically the Xiaomi perseus-p-oss MIX 3 device.

Q: What is the nature of the flaw in CVE-2018-20787?

CVE-2018-20787 is caused by an integer overflow due to missing checks in the tpdbg_write function of the driver.

Published Feb 25, 2019

Updated

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.

Affected Software

1 affected component

Micode Xiaomi Perseus-p-oss<=2018-11-26

Event History

Feb 25, 2019

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-20787?

CVE-2018-20787 has a severity rating of high with a CVSS score of 7.1.

What are the potential impacts of CVE-2018-20787?

The potential impacts of CVE-2018-20787 include a device crash due to an integer overflow.

How can I fix CVE-2018-20787?

Fixing CVE-2018-20787 involves updating the ft5x46 touchscreen driver to ensure proper checks on size arguments.

Who is affected by CVE-2018-20787?

CVE-2018-20787 affects devices running custom Linux kernels, specifically the Xiaomi perseus-p-oss MIX 3 device.

What is the nature of the flaw in CVE-2018-20787?