1. Home
  2. Vulnerabilities
  3. CVE-2019-19532

CVE-2019-19532

CVSS v3.1 6.8 (Medium)
68% Progress
CVSS v2.0 4.6 (Medium)
46% Progress
EPSS 0.32 % (71th)
0.32% Progress
Affected Products 1
Advisories 22
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.

Weaknesses
CWE-787
Out-of-bounds Write
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2019-12-03 16:15:13
(4 years ago)
Updated Date
2020-01-07 06:15:16
(4 years ago)

Affected Products

Linux

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 5.3.9 version cpe:2.3:o:linux:linux_kernel < 5.3.9