CVE-2024-48855: medium-severity vulnerability in BlackBerry QNX Software Development Platform…
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.4%
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
BlackBerry · QNX Software Development Platform (SDP)Related CVEs — BlackBerry QNX Software Development Platform…
In the same product, most dangerous first.
CVE-2020-6932CRITICALCVE-2020-6932EPSS 3.6%CVE-2021-32024CRITICALCVE-2021-32024EPSS 1.8%CVE-2025-2474CRITICALVulnerability in PCX Image Codec Impacts QNX Software Development PlatformEPSS 0.8%CVE-2017-3892LOWCVE-2017-3892EPSS 0.8%CVE-2024-48856CRITICALVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%CVE-2024-48858HIGHVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformEPSS 0.6%