Heap Out-of-Bounds Read in libdisplay-info

Executive Summary

This vulnerability is a heap out-of-bounds read flaw in libdisplay-info through version 0.4.0. It occurs in the DisplayID v1 section parser when a data block's declared length exceeds the section size. Attackers can exploit this by providing a maliciously crafted EDID from a compromised monitor, KVM, capture device, or EDID file. This causes the is_all_zeroes function to read past the allocated buffer, potentially leading to crashes.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect EDID data from monitors, KVM switches, or capture devices for malformed DisplayID sections. Use tools like edid-decode to analyze EDID blobs for over-long declared lengths in DisplayID data blocks. Check library versions of libdisplay-info (0.4.0 or earlier) in projects like wlroots, Mesa, or Weston.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to crash applications or systems processing EDID data from untrusted sources. If exploited, it may cause denial-of-service conditions, application instability, or unexpected behavior in systems relying on libdisplay-info for EDID parsing.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly impact compliance with GDPR or HIPAA as it is a technical flaw in a library parsing EDID data. However, if exploited, it could lead to system crashes, potentially causing denial-of-service conditions in systems handling sensitive data. This might indirectly affect compliance by disrupting operations that rely on display devices in regulated environments.

Useful 0 Not Useful 0

Mitigation Strategies

Update libdisplay-info to version 0.4.0 or later to address the heap out-of-bounds read vulnerability in the DisplayID v1 section parser.

Useful 0 Not Useful 0