Android For MSM Goodix GT915 Touchscreen Driver Multiple Local Memory Corruption Vulnerabilities

Bugtraq ID:	63661
Class:	Boundary Condition Error
CVE:	CVE-2013-4740
Remote:	No
Local:	Yes
Published:	Nov 07 2013 12:00AM
Updated:	Mar 19 2015 08:48AM
Credit:	Jonathan Salwan of Sysdream Security Lab
Vulnerable:	Avaya 96x1 IP Deskphone 6.2 Avaya 96x1 IP Deskphone 6
Not Vulnerable:

Android For MSM Goodix GT915 Touchscreen Driver Multiple Local Memory Corruption Vulnerabilities

Android For MSM is prone to multiple local memory-corruption vulnerabilities that occur in the Goodix GT915 touchscreen driver because it fails to properly bounds-check user-supplied data.

Local attackers can exploit these issues to execute arbitrary code. Failed exploit attempts may cause a denial-of-service condition.

Android For MSM Goodix GT915 Touchscreen Driver Multiple Local Memory Corruption Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Android For MSM Goodix GT915 Touchscreen Driver Multiple Local Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Android For MSM Goodix GT915 Touchscreen Driver Multiple Local Memory Corruption Vulnerabilities

References:

• Android for MSM Project Homepage (Code Aurora Forum)
  
• input: touchpanel: fix security issues in GT915 driver (Code Aurora Forum)
  
• Multiple memory corruption and race condition in Goodix gt915 Android touchscree (Code Aurora Forum)
  
• Wind River Linux kernel Security Update (WIND00444035 WIND00444029 WIND00444030 (Avaya)