ByteOS Network

Vulnerability Details :

CVE-2019-8413

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-17 Feb, 2019 | 19:00

Updated At-04 Aug, 2024 | 21:17

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:17 Feb, 2019 | 19:00

Updated At:04 Aug, 2024 | 21:17

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md	x_refsource_MISC

Hyperlink: https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md	x_refsource_MISC x_transferred

Hyperlink: https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:17 Feb, 2019 | 19:29

Updated At:22 Sep, 2022 | 14:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.9

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Xiaomi

>>mi_mix_2_firmware>>4.4.78

cpe:2.3:o:mi:mi_mix_2_firmware:4.4.78:*:*:*:*:*:*:*

Xiaomi

>>mi_mix_2>>-

cpe:2.3:h:mi:mi_mix_2:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

CWE ID: CWE-476

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md	cve@mitre.org	Exploit Third Party Advisory

Hyperlink: https://github.com/datadancer/HIAFuzz/blob/master/MIX2_elliptic.md

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

Similar CVEs

156Records found

CVE-2018-5333

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-2.10% / 83.36%

7 Day CHG~0.00%

Published-11 Jan, 2018 | 07:00

Updated-05 Aug, 2024 | 05:33

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

Vendor-n/a Linux Kernel Organization, Inc Debian GNU/Linux Canonical Ltd.

Product-ubuntu_linux debian_linux linux_kernel n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2015-3839

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.5||MEDIUM

EPSS-0.55% / 66.97%

7 Day CHG~0.00%

Published-07 Aug, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash).

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-1939

Matching Score-4

Assigner-Qualcomm, Inc.

View Details

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.76%

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 16:25

Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm7250 sa8145p_firmware sm7250_firmware qca6431_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware apq8009_firmware qca6335 msm8917 sa6155 sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 sd632 qca9377 wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 wcn3615_firmware qsw8573_firmware wcn3660b sd450_firmware qca4020 sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 msm8909w wcn3998_firmware apq8009w_firmware qca6420 qca6436_firmware apq8053_firmware wcn3610_firmware sd778g sa6155p_firmware qca6310 sd429 sdxr2_5g sa8155_firmware wcn3988_firmware qca6430 sa6145p_firmware sd205 qca6421 sd429_firmware sd778g_firmware wcd9340 sa8195p apq8017_firmware sdm830_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca4020_firmware qca6436 wcd9335 sa6155p wcn6851 qcs603_firmware qca6174a_firmware wcn3660_firmware wcd9385 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sa8150p wcn3910_firmware msm8953_firmware wsa8830_firmware sda429w msm8917_firmware sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sa8195p_firmware apq8017 wcn6750_firmware sd450 wcn3610 wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w sd780g sd865_5g sdx24 sdx55m_firmware wcn6856_firmware sd888 qet4101_firmware msm8909w_firmware qca6574 sd632_firmware sd670_firmware sdm429w_firmware sd665_firmware wsa8835 wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware wcn6855_firmware qca9379_firmware qca6174a sdx24_firmware qca6310_firmware sm7325 qca6430_firmware wcd9335_firmware wcn6750 sd439_firmware qca6335_firmware qsw8573 qca6574_firmware qcs605 wcd9340_firmware sd855 sm4125_firmware wcn6850 sd665 wcn3910 wsa8815 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware apq8009 qca6391 sd730 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware qca6574au sa8155p_firmware sd205_firmware sd670 apq8009w sd480 sd870 wsa8810 wcn6855 sd210_firmware wcn6856 qsm8250 sa6145p wcn3680b sdxr1 sd768g sa8145p wcn6740 qca6696 qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 apq8053 sa8155p sd675 sd845 sd439 qet4101 sdm830 wcn3660 qca9379 qsm8250_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2017-17113

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 16.60%

7 Day CHG~0.00%

Published-04 Dec, 2017 | 08:00

Updated-20 Apr, 2025 | 01:37

ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request.

Vendor-ikarussecurity n/a

Product-anti.virus n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-1096

Matching Score-4

Assigner-NVIDIA Corporation

View Details

Matching Score-4

Assigner-NVIDIA Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 18.49%

7 Day CHG~0.00%

Published-22 Jul, 2021 | 04:25

Updated-03 Aug, 2024 | 15:55

NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash.

Vendor-NVIDIA Corporation

Product-gpu_display_driver NVIDIA GPU Display Driver

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2015-8970

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 10.11%

7 Day CHG~0.00%

Published-28 Nov, 2016 | 03:01

Updated-12 Apr, 2025 | 10:46

crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.

Vendor-n/a Linux Kernel Organization, Inc

Product-linux_kernel n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-8413

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs