CVE-2024-48856

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - secure@blackberry.com

Published

2025-01-14

Last modified

2025-01-15

Weaknesses

CWE-787

Affected products

• Qnx Software Development Platform (Blackberry)
• Qnx Software Development Platform Sdp (Blackberry)

References

• https://support.blackberry.com/pkb/s/article/140334