High severity · published Jul 12, 2019
CVE-2019-8998
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
Qnx Software Development Platform · Blackberry
through 6.5.0 · source: NVD
Affected product
QS
Qnx Software Development Platform
Blackberry
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-8998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-8998
Mitigation
http://support.blackberry.com/kb/articleDetail?articleNumber=000057178
More from Qnx Software Development Platform
9.8
CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
9.8
CVE-2024-48856
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
9.8
CVE-2021-32024
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the…
9.8
CVE-2021-22156
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1…
9.8
CVE-2020-6932
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow…