What’s Vulnerable › Vulnerabilities

CVE-2018-19939

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-07 · updated 2026-06-17
• Weakness: CWE-476

Description

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.

Affected products

• Mi A2 Lite Firmware: through 2018-08-27
• Mi Redmi 6 Firmware: through 2018-08-27

References

• https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972
• https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972

Get alerted when CVE-2018-19939 or the next vulnerability affects your stack