CVE-2019-7386

6.5 MEDIUM

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices

Published: 2019-03-21 · Last updated: 2026-06-05

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Vendor	Product
kaiostech	8810_4g_firmware, kaios
nokia	8810_4g_firmware, kaios

Description

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2019-7386
[Exploit reference]http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.html
[Exploit reference]http://seclists.org/fulldisclosure/2019/Feb/35
[Other]http://www.breakthesec.com
[Other]http://www.breakthesec.com/search/label/0day
[Other]https://developer.kaiostech.com/bugzilla-reports/report_141873.html
[Other]https://developer.kaiostech.com/bugzilla-reports/report_58204.html
[Exploit reference]https://s3curityb3ast.github.io
[Exploit reference]https://s3curityb3ast.github.io/KSA-Dev-007.md
[Exploit reference]http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.html
[Exploit reference]http://seclists.org/fulldisclosure/2019/Feb/35
[Other]http://www.breakthesec.com
[Other]http://www.breakthesec.com/search/label/0day
[Exploit reference]https://s3curityb3ast.github.io
[Exploit reference]https://s3curityb3ast.github.io/KSA-Dev-007.md