CVE-2023-32701highCWE-1288

CVE-2023-32701: high-severity vulnerability in BlackBerry QNX Software Development Platform…

Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

Published · Updated

Follow this CVE+ Monitor QNX Software Development Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.2%
In short

A flaw in QNX's networking system fails to properly check incoming network data, allowing attackers to leak sensitive information or crash the system by sending specially crafted network packets.

Technical detail

An improper input validation vulnerability in the networking stack of QNX SDP 6.6, 7.0, and 7.1 allows remote attackers to trigger information disclosure or denial-of-service conditions through malformed network packets; exploitation requires network access to the affected system.

Summary generated and translated by AI from the official description.
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected products
BlackBerry · QNX Software Development Platform (SDP)
Related CVEs — BlackBerry QNX Software Development Platform…

In the same product, most dangerous first.

CVE-2020-6932CRITICALCVE-2020-6932EPSS 3.6%CVE-2021-32024CRITICALCVE-2021-32024EPSS 1.8%CVE-2025-2474CRITICALVulnerability in PCX Image Codec Impacts QNX Software Development PlatformEPSS 0.8%CVE-2017-3892LOWCVE-2017-3892EPSS 0.8%CVE-2024-48856CRITICALVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2024-48858HIGHVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%