VULNERABILITY INTELLIGENCE

CVE-2019-8413

CVSS score5.5 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2019-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).

Weakness classification

  • CWE-476: NULL Pointer Dereference

Primary references