What is CVE-2019-18567?

CVE-2019-18567 is a medium-severity vulnerability in Bromium Client, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.3/10. Published 2020-02-03.

How severe is CVE-2019-18567?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Out-of-bounds Read in Bromium Client

CVE-2019-18567

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

Vulnerability class: Race Condition

Published 2020-02-03 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H.

EPSS exploit prediction

EPSS: 0.005 (38.3th percentile), scored 2026-10-06.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 38.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Bromium Client — versions 4.0.3.2060, ?< 4.0.3.2060, ?>= 4.0.3.2060
HP Bromium

Weakness classification (CWE)

References

support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released (Release Notes, Vendor Advisory)
airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18… (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2019-18567?: CVE-2019-18567 is a medium-severity vulnerability in Bromium Client, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.3/10. Published 2020-02-03.
How severe is CVE-2019-18567?: Medium severity. CVSS v3 base score is 6.3 out of 10.