The Linux kernel Goodix touchscreen driver contains a stack out‑of‑bounds write in the goodix_ts_read_input_report function. A four‑bit field from the device configuration is used to determine the maximum number of contacts to copy into a fixed 92‑byte on‑stack buffer without clamping this value to the buffer size. If a device reports more than the intended 10 contacts, the driver writes up to 30 bytes beyond the buffer, corrupting the kernel stack and potentially allowing arbitrary code execution or a kernel crash. This flaw corresponds to CWE‑787 (Out‑of‑Bounds Write).

The vulnerability affects any Linux kernel image that includes the Goodix touchscreen driver configuration before the patch that clamps the max_touch_num value. Devices such as laptops, tablets, or other systems that load this driver and use a Goodix touch controller are directly impacted. Any system built with an older kernel version that does not apply the fix is susceptible.

The CVSS score of 7.8 indicates high severity, and the EPSS score of less than 1 % shows a very low current exploitation probability. The flaw is not listed in the CISA KEV catalog. As a kernel out‑of‑bounds write, the vulnerability can lead to privilege escalation or denial of service. Based on the description, it is inferred that exploitation would require manipulating I2C traffic sent to or received from the Goodix controller. Possible, but unconfirmed, vectors might involve physical access, an application with privileged I2C access, or a malicious USB device that can inject I2C packets, yet the exact attack surface remains uncertain.