61 matches found
CVE-2026-64274
A flaw was found in the Linux kernel's Goodix touchscreen driver. An attacker with physical access to the I2C bus, or a malicious touchscreen controller, could exploit a vulnerability where the driver fails to properly validate the number of reported touch points. This could lead to a stack...
CVE-2026-64367
A flaw was found in the Linux kernel's hid-goodix-spi driver. This vulnerability, a stack buffer overflow, allows a local attacker to provide an oversized report to the system. This can lead to a buffer overflow, potentially enabling the attacker to execute arbitrary code with elevated privileges...
SUSE CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64367
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
UBUNTU-CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
CVE-2026-64367
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
EUVD-2026-48911
In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...
CVE-2026-64367
CVE-2026-64367 : Linux kernel HID GOODIX SPI driver (hid-goodix-spi) vulnerability where goodix_hid_set_raw_report() copies payload into a 128-byte stack buffer without proper bounds checking. The header is ~11–12 bytes, and the HID core caps at HID_MAX_BUFFER_SIZE (16384) by default, but the dri...
CVE-2026-64274 Input: goodix - clamp the device-reported contact count
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64274
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
EUVD-2026-48986
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64274 Input: goodix - clamp the device-reported contact count
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...
CVE-2026-64274
Summary: CVE-2026-64274 affects the Linux kernel Goodix touchscreen driver. The runtime check for the device-reported touch count does not clamp the value (ts->max_touch_num) to the maximum supported contacts, which can be up to 15 due to a 4‑bit field. This allows a stack-based out-of-bounds ...
PT-2026-64588
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow exists in the hid-goodix-spi driver. The function goodix hid set raw report utilizes a 128-byte stack buffer tmp buf to build a protocol frame, consisting of an...
PT-2026-64495
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodix ts read input report copies the number of touch points reported by the device into an on-stack buffer u8 point data2 + GOODIX MAX CONTACT SIZE GOODIX MAX CONTACTS;...
Linux Distros Unpatched Vulnerability : CVE-2026-64367
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf,...
Linux Distros Unpatched Vulnerability : CVE-2026-64274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer...