cpe:/o:xiaomi:mi_a2_lite_firmware:2018-08-27 cpe:/o:xiaomi:redmi_6_firmware:2018-08-27 CVE-2018-19939 2018-12-07T04:29:00.353-05:00 2019-05-17T15:29:00.353-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/972 The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.