CVE-2018-20788: Integer Overflow
drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted application for denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20788?
The severity of CVE-2018-20788 is rated as medium with a score of 5.5 based on the CVSS 3.0 metrics.
How do I fix CVE-2018-20788?
To fix CVE-2018-20788, ensure that you install the latest patches provided for the Xiaomi Redmi 6pro or update to a more secure version of the Linux kernel.
What impact does CVE-2018-20788 have on my device?
CVE-2018-20788 can lead to integer overflow vulnerabilities which may be exploited by crafted applications to cause denial of service or escalate privileges.
Which devices are affected by CVE-2018-20788?
CVE-2018-20788 affects custom Linux kernels on Xiaomi Redmi 6pro devices running the Micode Xiaomi Perseus-p-oss software.
What is the cause of the vulnerability in CVE-2018-20788?
The cause of CVE-2018-20788 is due to several integer overflow issues resulting from left-shifting operations where the right-hand operand can be equal to or exceed the integer length.