CVE-2019-7386

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.

• http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Feb/35Exploit, Mailing List, Third Party Advisory
• http://www.breakthesec.comNot Applicable, Third Party Advisory
• http://www.breakthesec.com/search/label/0dayNot Applicable, Third Party Advisory
• https://developer.kaiostech.com/bugzilla-reports/report_141873.html
• https://developer.kaiostech.com/bugzilla-reports/report_58204.html
• https://s3curityb3ast.github.ioExploit, Third Party Advisory
• https://s3curityb3ast.github.io/KSA-Dev-007.mdExploit, Third Party Advisory
• http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Feb/35Exploit, Mailing List, Third Party Advisory
• http://www.breakthesec.comNot Applicable, Third Party Advisory
• http://www.breakthesec.com/search/label/0dayNot Applicable, Third Party Advisory
• https://s3curityb3ast.github.ioExploit, Third Party Advisory
• https://s3curityb3ast.github.io/KSA-Dev-007.mdExploit, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7364DLL preloading vulnerability in versions 2017, 2018, 2019, a…
• CVE-2019-7365DLL preloading vulnerability in Autodesk Desktop Application…7.8
• CVE-2019-7366Buffer overflow vulnerability in Autodesk FBX Software Devel…7.8
• CVE-2019-7383An issue was discovered on Systrome Cumilon ISG-600C, ISG-60…7.8
• CVE-2019-7384An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7385An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7387A local file inclusion vulnerability exists in the web inter…
• CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…