Blackberry QNX Software Development Platform (Sdp) vulnerabilities
13 vulnerabilities
Known vulnerabilities in Blackberry QNX Software Development Platform (Sdp), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-32024blackberryqnx_software_development_platform+1
EPSS score1.79%
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.CVE-2025-2474blackberryqnx_software_development_platform+1EPSS score0.73%
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.CVE-2020-6932blackberryqnx_software_development_platform+1EPSS score3.59%
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.CVE-2017-9369blackberryqnx_software_development_platform+1EPSS score0.56%
In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader.CVE-2017-3892blackberryqnx_software_development_platform+1EPSS score0.78%
In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that could be used in a blended attack by executing commands targeting procfs resources.CVE-2024-48858blackberryqnx_software_development_platform+1EPSS score0.57%
Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.CVE-2024-48857blackberryqnx_software_development_platform+1EPSS score0.44%
NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.CVE-2024-48856blackberryqnx_software_development_platform+1EPSS score0.62%
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.CVE-2024-48855blackberryqnx_software_development_platform+1EPSS score0.37%
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.CVE-2024-48854blackberryqnx_software_development_platform+1EPSS score0.37%
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.CVE-2024-35213blackberryqnx_software_development_platform+1EPSS score0.52%
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.CVE-2024-35215blackberryqnx_software_development_platform+1EPSS score0.16%
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.CVE-2023-32701blackberryqnx_software_development_platform+1EPSS score0.24%
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.