CVE-2019-8413

PoC —

CVSS 3.0

5.5 medium

EPSS

<1%p31

Published

Feb 17, 2019 (Feb 17, 2019)

Modified

Jun 17, 2026

Description

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).

Vendors: mi
Products: mi mix 2 firmware
Weakness: CWE-476
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.