Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

epss

{'score': 0.00028}


cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2013-09-13T18:00:00

Updated: 2024-08-06T15:52:21.549Z

Reserved: 2013-04-11T00:00:00

Link: CVE-2013-2897

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-09-16T13:01:44.987

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-2897

cve-icon Redhat

Severity : Moderate

Publid Date: 2013-08-29T00:00:00Z

Links: CVE-2013-2897 - Bugzilla