CVE-2026-64274 Input: goodix - clamp the device-reported contact count

🗓️ 25 Jul 2026 08:49:20Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Clamps max_touch_num to Goodix maximum contacts to prevent stack out-of-bounds in input reports.

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2026-64274	25 Jul 202608:49	–	cve
Cvelist	CVE-2026-64274 Input: goodix - clamp the device-reported contact count	25 Jul 202608:49	–	cvelist
Debian CVE	CVE-2026-64274	25 Jul 202608:49	–	debiancve
EUVD	EUVD-2026-48986	25 Jul 202608:49	–	euvd
NVD	CVE-2026-64274	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64274	25 Jul 202610:17	–	osv
OSV	ECHO-FCEB-9C84-D24F	26 Jul 202602:26	–	osv
OSV	UBUNTU-CVE-2026-64274	27 Jul 202600:00	–	osv
Positive Technologies	PT-2026-64495	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64274	25 Jul 202616:46	–	susecve

Source	Link
git	www.git.kernel.org/stable/c/2a67668690129953e898923260a2dd1c7c196495
git	www.git.kernel.org/stable/c/3b32303460155603d25444274856013d211d5e1f
git	www.git.kernel.org/stable/c/46addbd13dbf4aacb71cfbca964a5e552d0f45ae
git	www.git.kernel.org/stable/c/4bfea9c3a0981c1c7fc5d1a1b27197b2de247902
git	www.git.kernel.org/stable/c/5ed62a96e06be4e94b8296b7932afee550a70e04
git	www.git.kernel.org/stable/c/719d1a2c83a46be6bf81af905e4f6adb3d32dc28
git	www.git.kernel.org/stable/c/98b2caef249183b572c04451365246f919707845
git	www.git.kernel.org/stable/c/e825f352ef5271255cd08cc994b0dc25648a2f38
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64274.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-64274

27 Jul 2026 04:03Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.00211

Goodix touchscreen input report maximum contacts stack bounds kernel vulnerability