rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-16387 
PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-privilege account. (This can perform actions and retrieve data that only an administrator should have access to.) NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T17:25:14.000Z
CVE-2019-16388 
PEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyStream=MyAlerts request to get Audit Log information while using a low-privilege account. NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T17:26:23.000Z
CVE-2019-16391 
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T20:49:04.000Z
CVE-2019-16392 
SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T20:48:28.000Z
CVE-2019-16393 
SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T20:48:04.000Z
CVE-2019-16394 
SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T20:47:50.000Z
CVE-2019-16395 
GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T21:06:15.000Z
CVE-2019-16396 
GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T21:06:04.000Z
CVE-2019-16398 
On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file named zskj_script_run.sh that executes a reverse shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T14:39:26.000Z
CVE-2019-16399 
Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T13:06:13.000Z
CVE-2019-16400 
Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow attackers to send AT commands over Bluetooth, resulting in several Denial of Service (DoS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T22:12:26.000Z
CVE-2019-16401 
Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow injection of AT+CIMI and AT+CGSN over Bluetooth, leaking sensitive information such as IMSI, IMEI, call status, call setup stage, internet service status, signal strength, current roaming status, battery level, and call held status.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T22:14:04.000Z
CVE-2019-16403 
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T11:49:51.000Z
CVE-2019-16404 
Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO statement, as demonstrated by the providerID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-21T22:14:49.000Z
CVE-2019-16405 
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T17:35:42.000Z
CVE-2019-16406 
Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing attackers to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T17:36:59.000Z
CVE-2019-16407 
JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-02T18:11:42.000Z
CVE-2019-16409 
In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. (Users who upgrade from SilverStripe 3.x to 4.x and had Versioned Files installed have no further need for this module, because the 4.x release has built-in versioning. However, nothing in the upgrade process automates the destruction of these insecure artefacts, nor alerts the user to the criticality of destruction.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T14:36:27.000Z
CVE-2019-16410 
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of header_len checking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T19:21:40.000Z
CVE-2019-16411 
An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in decode-ipv4.c tries to access a memory region that is not allocated. There is a check for o->len < 5 (corresponding to 2 bytes of header and 3 bytes of data). Then, "flag = *(o->data + 3)" places one beyond the 3 bytes, because the code should have been "flag = *(o->data + 1)" instead.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T19:20:58.000Z
CVE-2019-16412 
In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Prohibition of this zero value is only enforced within the GUI.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T15:14:34.000Z
CVE-2019-16413 
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T23:29:46.000Z
CVE-2019-16414 
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login/?reason=failure&NTLM= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T12:10:20.000Z
CVE-2019-16416 
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:04:13.000Z
CVE-2019-16417 
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-08T12:05:09.000Z
CVE-2019-16444 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful exploitation could lead to privilege escalation.
Problem types: description: Binary Planting (default folder privilege escalation)
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:29:05.000Z
CVE-2019-16445 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:31:50.000Z
CVE-2019-16446 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Untrusted Pointer Dereference
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:33:34.000Z
CVE-2019-16448 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:37:52.000Z
CVE-2019-16449 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:39:47.000Z
CVE-2019-16450 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:43:44.000Z
CVE-2019-16451 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:45:01.000Z
CVE-2019-16452 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:46:12.000Z
CVE-2019-16453 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Security Bypass
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:47:46.000Z
CVE-2019-16454 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:50:00.000Z
CVE-2019-16455 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Untrusted Pointer Dereference
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:51:21.000Z
CVE-2019-16456 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:52:46.000Z
CVE-2019-16457 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:53:45.000Z
CVE-2019-16458 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:54:52.000Z
CVE-2019-16459 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:56:08.000Z
CVE-2019-16460 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Untrusted Pointer Dereference
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:57:11.000Z
CVE-2019-16461 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:58:05.000Z
CVE-2019-16462 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Buffer Error
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T14:58:56.000Z
CVE-2019-16463 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Untrusted Pointer Dereference
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T15:00:07.000Z
CVE-2019-16464 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T15:01:23.000Z
CVE-2019-16465 
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-12-19T15:02:33.000Z
CVE-2019-16466 
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Reflected Cross-Site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2020-01-15T16:13:14.000Z
CVE-2019-16467 
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Reflected Cross-Site Scripting
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2020-01-15T16:16:10.000Z
CVE-2019-16468 
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: User Interface Injection
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2020-01-15T16:15:44.000Z
CVE-2019-16469 
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
Problem types: description: Expression Language injection
Affected products: vendor: Adobe
product: Adobe Experience Manager
Published: 2020-01-15T16:15:22.000Z
CVE-2019-16470 CoolType.dll crash - Tianfu Cup
Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Problem types: cwe_id: CWE-121
description: Stack-based Buffer Overflow (CWE-121)
Affected products: vendor: Adobe
product: Acrobat Reader
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
availabilityRequirement: NOT_DEFINED
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
confidentialityRequirement: NOT_DEFINED
environmentalScore: 7.8
environmentalSeverity: HIGH
exploitCodeMaturity: NOT_DEFINED
integrityImpact: HIGH
integrityRequirement: NOT_DEFINED
modifiedAttackComplexity: LOW
modifiedAttackVector: LOCAL
modifiedAvailabilityImpact: HIGH
modifiedConfidentialityImpact: HIGH
modifiedIntegrityImpact: HIGH
modifiedPrivilegesRequired: NONE
modifiedScope: NOT_DEFINED
modifiedUserInteraction: REQUIRED
privilegesRequired: NONE
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 7.8
temporalSeverity: HIGH
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2023-09-11T13:50:57.732Z
CVE-2019-16471 Use-After-Free in app.measureDialog - Tianfu Cup
Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Problem types: cwe_id: CWE-416
description: Use After Free (CWE-416)
Affected products: vendor: Adobe
product: Acrobat Reader
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
availabilityRequirement: NOT_DEFINED
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
confidentialityRequirement: NOT_DEFINED
environmentalScore: 7.8
environmentalSeverity: HIGH
exploitCodeMaturity: NOT_DEFINED
integrityImpact: HIGH
integrityRequirement: NOT_DEFINED
modifiedAttackComplexity: LOW
modifiedAttackVector: LOCAL
modifiedAvailabilityImpact: HIGH
modifiedConfidentialityImpact: HIGH
modifiedIntegrityImpact: HIGH
modifiedPrivilegesRequired: NONE
modifiedScope: NOT_DEFINED
modifiedUserInteraction: REQUIRED
privilegesRequired: NONE
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 7.8
temporalSeverity: HIGH
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2023-09-11T13:50:59.657Z
CVE-2019-16508 
The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigger an Integer Overflow and gain privileges via a malicious application. This occurs because of intentional access for the GPU process to /dev/dri/card1 and the PowerVR ioctl handler, as demonstrated by PVRSRVBridgeSyncPrimOpCreate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T11:07:51.000Z