Read the docs

BlackBerry

Records90All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

BlackBerry records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

21 records in Qnx Software Development Platform · all components

Priority MEDIUM 50

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2025-06-10 No fix listed CWE-787
Priority MEDIUM 50

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2025-01-14 No fix listed CWE-787
Priority MEDIUM 49

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrar…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03589 Published 2020-08-12 No fix listed CWE-150
Priority MEDIUM 46

An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01793 Published 2021-08-17 No fix listed CWE-190
Priority MEDIUM 45

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote a…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.08221 Published 2013-07-12 No fix listed CWE-119
Priority MEDIUM 44

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow…

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.01277 Published 2017-11-14 No fix listed CWE-923
Priority MEDIUM 41

An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the i…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00516 Published 2024-06-11 No fix listed CWE-1287
Priority MEDIUM 40

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2025-01-14 No fix listed CWE-1287
Priority LOW 34

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.06657 Published 2013-07-12 No fix listed CWE-119
Priority LOW 33

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier c…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2019-07-12 No fix listed CWE-413
Priority LOW 27

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service co…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00163 Published 2024-10-08 No fix listed CWE-476
Priority LOW 19

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relat…

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00561 Published 2017-11-14 No fix listed CWE-200
Priority LOW 19

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that…

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00776 Published 2017-11-14 No fix listed CWE-200
TI-2017-02989 CVE-2017-3893 · GHSA-27rr-r4mx-xr9r

Incomplete vulnerability mitigations

Priority LOW 11

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attack…

CVSS 3.1LOW 1.9 Local High privileges No interaction EPSS 0.005 Published 2017-11-14 No fix listed CWE-693
Open these records in search →