CVE-2019-8998

HIGH

BlackBerry QNX Software Development Platform < 6.5.0 - Local Privilege Escalation via Procfs Information Disclosure

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.

References (1)

Core 1
Core References
Mitigation, Patch, Vendor Advisory x_refsource_misc
http://support.blackberry.com/kb/articleDetail?articleNumber=000057178

Scores

CVSS v3 7.8
EPSS 0.0022
EPSS Percentile 12.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-413
Status published
Products (1)
blackberry/qnx_software_development_platform < 6.5.0
Published Jul 12, 2019
Tracked Since Feb 18, 2026