Approved changes feed: RSS · Atom

cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorBlackberry (248c4d29-a9fb-529f-b35a-888413af537f)
ProductQnx Software Development Platform (5838c20d-6a77-5aaf-8bed-3d521dab87e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2474 vulnerable 2026-06-03 15:00:25.526463 Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
CRITICAL (9.8)
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
Published: 2025-06-10T17:38:03.661Z
Updated: 2025-06-10T18:24:20.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48858 vulnerable 2026-06-03 14:57:10.284734 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
HIGH (7.5)
Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
Published: 2025-01-14T19:09:15.560Z
Updated: 2025-01-15T15:16:17.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48857 vulnerable 2026-06-03 14:57:10.284228 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
HIGH (7.5)
NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
Published: 2025-01-14T19:06:38.040Z
Updated: 2025-01-14T19:13:28.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48856 vulnerable 2026-06-03 14:57:10.283749 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
CRITICAL (9.8)
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
Published: 2025-01-14T19:03:33.883Z
Updated: 2025-01-15T15:16:40.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48855 vulnerable 2026-06-03 14:57:10.283398 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
MEDIUM (5.3)
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
Published: 2025-01-14T18:59:25.736Z
Updated: 2025-02-12T20:31:19.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48854 vulnerable 2026-06-03 14:57:10.281892 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
MEDIUM (5.3)
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
Published: 2025-01-14T18:53:25.936Z
Updated: 2025-01-14T20:15:07.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35213 vulnerable 2026-06-03 14:55:55.703054 Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)
CRITICAL (9)
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.
Published: 2024-06-11T18:37:04.161Z
Updated: 2025-09-09T15:04:56.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32701 vulnerable 2026-06-03 14:51:59.794950 Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)
HIGH (7.1)
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.
Published: 2023-11-14T18:33:59.148Z
Updated: 2025-09-09T15:06:29.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.