KaiOS Gecko Skia Buffer Overflow (CVE-2019-7386) DoS with POC

Vulnerability Overview Vulnerability Name: Bug 58204 - Skia buffer overflow CVE ID: CVE-2019-7386 Vulnerability Type: Buffer Overflow Attack Type: Remote Impact: Denial of Service (DoS) Affected Scope Affected Product: Nokia 8810 4G Software Version: 10.05 Kai OS Version: 2.5 Build Number: 10.05 Platform ver: 48.0.a2 Severity: High-Critical Remediation Fix Status: Fixed Fix Link: GitLab merge-request Fix Commits: Commit 1, Commit 2 POC Code Detailed Information Vulnerability Description: A Denial of Service issue was discovered in the Gecko component. Accessing a web page containing the POC code above causes the Gecko process to crash, resulting in a device reboot. Attack Vector: Triggered by accessing a web page containing malicious code. Remediation: Limit the number of canvas rendering batches to prevent memory overflow. Timeline 2019-01-06: Vulnerability discovered 2019-01-08: Reported to Nokia 2019-01-09: Reported to HMD Global 2019-01-10: Mentioned on Twitter 2019-01-15: CVE-ID requested 2019-02-04: CVE assigned 2019-03-23: Reported to Mozilla 2019-03-24: Remediation started 2019-04-10: Fix proposal submitted 2019-04-16: Fix completed 2019-05-02: Fix tested 2019-05-03: Fix confirmed effective 2019-05-06: Fix merged 2019-06-20: Fix code submitted Additional Information Reporter: Kaustubh Padwad Contact Information: - Twitter: @s3curityb3ast - Website: http://breakthesec.com - LinkedIn: Kaustubh Padwad

Goal Reached Thanks to every supporter — we hit 100%!

KaiOS Gecko Skia Buffer Overflow (CVE-2019-7386) DoS with POC