CVE-2024-48858

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.blackberry.com/pkb/s/article/140334	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::*
	cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::*
	cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:::::::*

History

01 Dec 2025, 18:06

Type	Values Removed	Values Added
Summary		(es) Una validación de entrada incorrecta en el códec de imagen PCX en las versiones 8.0, 7.1 y 7.0 de QNX SDP podría permitir que un atacante no autenticado provoque una condición de denegación de servicio en el contexto del proceso que utiliza el códec de imagen.
First Time		Blackberry qnx Software Development Platform Blackberry
CPE		cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::* cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:::::::* cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::*
References	~~() https://support.blackberry.com/pkb/s/article/140334 -~~	() https://support.blackberry.com/pkb/s/article/140334 - Vendor Advisory

14 Jan 2025, 20:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-14 20:15

Updated : 2025-12-01 18:06

NVD link : CVE-2024-48858

Mitre link : CVE-2024-48858

CVE.ORG link : CVE-2024-48858

JSON object : View

Products Affected

blackberry

qnx_software_development_platform

CWE

CWE-1287

Improper Validation of Specified Type of Input

7.5 /10