CVE-2019-9112

EUVD-2019-18497
The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
micodexiaomi_perseus-p-oss
𝑥
≤ 2018-11-26
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000