CVE-2019-9111: Integer Overflow
The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sdeevtlogfilterwrite in drivers/gpu/drm/msm/sdedbg.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9111?
The severity of CVE-2019-9111 is high, with a score of 7.1 according to CVSS v3.0.
What are the risks associated with CVE-2019-9111?
CVE-2019-9111 may lead to an integer overflow causing a device crash via an exploitable syscall.
How do I fix CVE-2019-9111?
To fix CVE-2019-9111, update the msm gpu driver to a version that includes proper checks for the count argument.
Which devices are affected by CVE-2019-9111?
CVE-2019-9111 affects devices running the custom Linux kernels on the Xiaomi perseus-p-oss, particularly the MIX 3 model.
What is the impact of CVE-2019-9111 on system security?
The impact of CVE-2019-9111 on system security includes potential denial of service due to device crashes.