CVE-2019-8998

HIGH

Blackberry Qnx Software Development Platform - Information Disclosure

Title source: rule
STIX 2.1

Description

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 14.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-413
Status published
Products (1)
blackberry/qnx_software_development_platform < 6.5.0
Published Jul 12, 2019
Tracked Since Feb 18, 2026