CVE-2019-7386: kaiostech kaios
Vulnerability summary
CVE-2019-7386 is a high (CVSS 7.1) vulnerability in kaiostech kaios. EPSS estimates a 3.71% chance of exploitation in the next 30 days, higher than 89.6% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 17-03-2019PublishedVulnerability first disclosed.
- 05-06-2026Last modifiedVulnerability information updated.
Description
A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.71%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.71% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (s3curityb3ast.github.io)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Kaiostech1 product
- kaios2.5
Nokia1 product
- 8810_4g_firmware10.05
2 vendors · 2 products
References
8 links- packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.htmlExploitThird Party AdvisoryVDB Entry