In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by inputsetkeycode, aka CID-cb222aed03d7.
[
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c",
"function": "input_set_keycode"
},
"digest": {
"length": 632.0,
"function_hash": "69018173575259869302789330293949498287"
},
"id": "CVE-2019-20636-00c5ebef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"139274923288134424268394965151142727247",
"95499731420493174255058159403320157874",
"123739315759981966743878504206928789060",
"103978181707577992980619181731488711960",
"10336862909808931769979139057949234001",
"152425505987891019274380961673862472861",
"306188943033425396074072753498527250529",
"269282265305154269544228595796902195695",
"220874209762409506206246963739310088927",
"267868390585593816517915983992887850017",
"6443924467172813741926430263751874137",
"175552199334555514788375970536284119239",
"158284475243394804145603176731880271785",
"309985373530904202160994254724761438104",
"94622411713738875798685570368344195292",
"22564241173949876185196363934238194118",
"114042889049284607710565222231496197587"
]
},
"id": "CVE-2019-20636-d8b94413",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c",
"function": "input_default_setkeycode"
},
"digest": {
"length": 1167.0,
"function_hash": "274745911285445841105790583794889751289"
},
"id": "CVE-2019-20636-e4dad459",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Function"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-20636.json"
[
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c",
"function": "input_default_setkeycode"
},
"digest": {
"length": 1167.0,
"function_hash": "274745911285445841105790583794889751289"
},
"id": "CVE-2019-20636-1ae1159c",
"source": "https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Function"
},
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"139274923288134424268394965151142727247",
"95499731420493174255058159403320157874",
"123739315759981966743878504206928789060",
"103978181707577992980619181731488711960",
"10336862909808931769979139057949234001",
"152425505987891019274380961673862472861",
"306188943033425396074072753498527250529",
"269282265305154269544228595796902195695",
"220874209762409506206246963739310088927",
"267868390585593816517915983992887850017",
"6443924467172813741926430263751874137",
"175552199334555514788375970536284119239",
"158284475243394804145603176731880271785",
"309985373530904202160994254724761438104",
"94622411713738875798685570368344195292",
"22564241173949876185196363934238194118",
"114042889049284607710565222231496197587"
]
},
"id": "CVE-2019-20636-589dfc3c",
"source": "https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Line"
},
{
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/input/input.c",
"function": "input_set_keycode"
},
"digest": {
"length": 632.0,
"function_hash": "69018173575259869302789330293949498287"
},
"id": "CVE-2019-20636-cbbc2edf",
"source": "https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784",
"signature_type": "Function"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-20636.json"