CVE-2018-20788: Integer Overflow

Q: What is the severity of CVE-2018-20788?

The severity of CVE-2018-20788 is rated as medium with a score of 5.5 based on the CVSS 3.0 metrics.

Q: How do I fix CVE-2018-20788?

To fix CVE-2018-20788, ensure that you install the latest patches provided for the Xiaomi Redmi 6pro or update to a more secure version of the Linux kernel.

Q: What impact does CVE-2018-20788 have on my device?

CVE-2018-20788 can lead to integer overflow vulnerabilities which may be exploited by crafted applications to cause denial of service or escalate privileges.

Q: Which devices are affected by CVE-2018-20788?

CVE-2018-20788 affects custom Linux kernels on Xiaomi Redmi 6pro devices running the Micode Xiaomi Perseus-p-oss software.

Q: What is the cause of the vulnerability in CVE-2018-20788?

The cause of CVE-2018-20788 is due to several integer overflow issues resulting from left-shifting operations where the right-hand operand can be equal to or exceed the integer length.

Published Feb 25, 2019

Updated

drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted application for denial of service.

Affected Software

1 affected component

Micode Xiaomi Perseus-p-oss<=2018-11-26

Event History

Feb 25, 2019

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-20788?

The severity of CVE-2018-20788 is rated as medium with a score of 5.5 based on the CVSS 3.0 metrics.

How do I fix CVE-2018-20788?

To fix CVE-2018-20788, ensure that you install the latest patches provided for the Xiaomi Redmi 6pro or update to a more secure version of the Linux kernel.

What impact does CVE-2018-20788 have on my device?

CVE-2018-20788 can lead to integer overflow vulnerabilities which may be exploited by crafted applications to cause denial of service or escalate privileges.

Which devices are affected by CVE-2018-20788?

CVE-2018-20788 affects custom Linux kernels on Xiaomi Redmi 6pro devices running the Micode Xiaomi Perseus-p-oss software.

What is the cause of the vulnerability in CVE-2018-20788?

The cause of CVE-2018-20788 is due to several integer overflow issues resulting from left-shifting operations where the right-hand operand can be equal to or exceed the integer length.

CVE-2018-20788: Integer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2018-20788?

How do I fix CVE-2018-20788?

What impact does CVE-2018-20788 have on my device?

Which devices are affected by CVE-2018-20788?

What is the cause of the vulnerability in CVE-2018-20788?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2018-20788?

How do I fix CVE-2018-20788?

What impact does CVE-2018-20788 have on my device?

Which devices are affected by CVE-2018-20788?

What is the cause of the vulnerability in CVE-2018-20788?