Integer overflow in BlackBerry QNX Software Development Platform , QNX OS for Medical and…
Priority MEDIUM 46CWE-190Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.
Summary
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier that could allow an attacker to potentially perform a denial of service or execute arbitrary code.
Why it matters now
EPSS 0.01793 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| BlackBerry | QNX Software Development Platform (SDP), QNX OS for Medical and QNX OS for Safety | QNX SDP 6.5.0 SP1 and earlier; QNX OS for Medical 1.1 and earlier; QNX OS for Safety 1.0.1 and earlier | — | No fix listed | CNA |
- QNX Software Development Platform (SDP), QNX OS for Medical and QNX OS for Safety VendorBlackBerry Affected QNX SDP 6.5.0 SP1 and earlier; QNX OS for Medical 1.1 and earlier; QNX OS for Safety 1.0.1 and earlier Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:* | before 6.5.0 | Vulnerable | BlackBerry |
| cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:-:*:*:*:*:*:* | 6.5.0 | Vulnerable | BlackBerry |
| cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:sp1:*:*:*:*:*:* | 6.5.0 sp1 | Vulnerable | BlackBerry |
| cpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:* | up to 1.1.1 | Vulnerable | BlackBerry |
| cpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:* | up to 1.0.2 | Vulnerable | BlackBerry |
- cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:* Versions before 6.5.0 Vulnerable ·BlackBerry
- cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:-:*:*:*:*:*:* Versions 6.5.0 Vulnerable ·BlackBerry
- cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:sp1:*:*:*:*:*:* Versions 6.5.0 sp1 Vulnerable ·BlackBerry
- cpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:* Versions up to 1.1.1 Vulnerable ·BlackBerry
- cpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:* Versions up to 1.0.2 Vulnerable ·BlackBerry
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-22156
- 2026-10-03 Alias added: GHSA-x456-hhph-f575
References
More BlackBerry Qnx Os For Medical vulnerabilities
- TI-2021-12004 An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions… CVSS 3.1HIGH 8.1
Sources
- CVE-2021-22156 · CVE Program
- CVE-2021-22156 · NVD
- FIRST EPSS
- GHSA-x456-hhph-f575 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences