← Back

CVE-2019-8998

nvd nist
Published: Jul 12, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.

Affected (1)

Blackberry
1 product
Qnx Software Development Platform
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Qnx Software Development Platform
Up to 6.5.0

Related CWEs

CWE-413
Improper Resource Locking
The product does not lock or does not correctly lock a resource when the product must have exclusive access to the resource.

References (2)

Source: secure@blackberry.com
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory

Timeline

No history available yet.