{"id":"ASB-A-153715664","details":"In input_default_setkeycode of input.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-153715664","CVE-2019-20636"],"modified":"2026-03-11T05:55:19.988844Z","published":"2020-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-07-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/cb222aed03d798fc074be55e59d9a112338ee784"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2020-07-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"types":["EoP"],"spl":"2020-07-05","fixes":["https://android.googlesource.com/kernel/common/+/cb222aed03d798fc074be55e59d9a112338ee784"],"severity":"High","vanir_signatures":[{"signature_version":"v1","deprecated":false,"digest":{"function_hash":"69018173575259869302789330293949498287","length":632},"source":"https://android.googlesource.com/kernel/common/+/cb222aed03d798fc074be55e59d9a112338ee784","id":"ASB-A-153715664-323d816a","signature_type":"Function","target":{"file":"drivers/input/input.c","truncated_path_level":1,"function":"input_set_keycode"}},{"signature_version":"v1","deprecated":false,"digest":{"line_hashes":["139274923288134424268394965151142727247","95499731420493174255058159403320157874","123739315759981966743878504206928789060","103978181707577992980619181731488711960","10336862909808931769979139057949234001","152425505987891019274380961673862472861","306188943033425396074072753498527250529","269282265305154269544228595796902195695","220874209762409506206246963739310088927","267868390585593816517915983992887850017","6443924467172813741926430263751874137","175552199334555514788375970536284119239","158284475243394804145603176731880271785","309985373530904202160994254724761438104","94622411713738875798685570368344195292","22564241173949876185196363934238194118","114042889049284607710565222231496197587"],"threshold":0.9},"source":"https://android.googlesource.com/kernel/common/+/cb222aed03d798fc074be55e59d9a112338ee784","id":"ASB-A-153715664-51a65751","signature_type":"Line","target":{"file":"drivers/input/input.c","truncated_path_level":1}},{"signature_version":"v1","deprecated":false,"digest":{"function_hash":"274745911285445841105790583794889751289","length":1167},"source":"https://android.googlesource.com/kernel/common/+/cb222aed03d798fc074be55e59d9a112338ee784","id":"ASB-A-153715664-a5b51ccb","signature_type":"Function","target":{"file":"drivers/input/input.c","truncated_path_level":1,"function":"input_default_setkeycode"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-153715664.json"}}],"schema_version":"1.7.5"}