CVE-2021-32024criticalCWE-1287

CVE-2021-32024: critical vulnerability in BlackBerry QNX Software Development Platform…

Published · Updated

Follow this CVE+ Monitor QNX Software Development Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.8%
In short

A flaw in BlackBerry QNX's image processor allows attackers to run malicious code on a system by sending a specially crafted BMP image file. This is critical because it can give attackers complete control over the affected device.

Technical detail

A remote code execution vulnerability exists in the BMP image codec of BlackBerry QNX SDP 6.4–7.1, exploitable via a crafted BMP image file without authentication or user interaction required. The vulnerability allows arbitrary code execution within the codec's process context, potentially compromising system integrity and confidentiality.

Summary generated and translated by AI from the official description.
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
BlackBerry · QNX Software Development Platform (SDP)
Related CVEs — BlackBerry QNX Software Development Platform…

In the same product, most dangerous first.

CVE-2020-6932CRITICALCVE-2020-6932EPSS 3.6%CVE-2025-2474CRITICALVulnerability in PCX Image Codec Impacts QNX Software Development PlatformEPSS 0.8%CVE-2017-3892LOWCVE-2017-3892EPSS 0.8%CVE-2024-48856CRITICALVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2024-48858HIGHVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2017-9369LOWCVE-2017-9369EPSS 0.6%