CVE-2018-9388

The bug is located in the store_upgrade and store_cmd functions of the file drivers/input/touchscreen/stm/ftm4_pdc.c. Due to the lack of input data boundary checking and the possibility of an integer underflow (CWE-191), an out-of-bounds write occurs (CWE-787). An attacker can provide specially crafted input data to the touchscreen handling subsystem, thereby triggering a write in an unauthorized area of kernel memory.

Successful exploitation of the vulnerability can lead to privilege escalation — an attacker can obtain elevated privileges on the device, potentially up to the operating system kernel level.

Apply patches available from the manufacturer according to references — Google Pixel security bulletin dated 2018-06-01 (https://source.android.com/security/bulletin/pixel/2018-06-01).

Devices running Google Android equipped with the STM FTM4 touchscreen driver (ftm4_pdc); specific system versions indicated in manufacturer references (Pixel security bulletin, June 2018).