CVE-2019-1056

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1004, CVE-2019-1059.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105615.5Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of servCVE-2019-105627.8u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loadeCVE-2019-105637.8Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon ACVE-2019-105647.8Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, SnapCVE-2019-105659.8Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, SnapCVE-2019-105667.8Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in SnapdragCVE-2019-105677.8There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could alCVE-2019-105697.8Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, SnapCVE-2019-10577.5A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successCVE-2019-105717.8Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon CompuCVE-2019-105729.8Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in SnapdragonCVE-2019-105747.1Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon