by Kastro
Paper/Archive/CVE-2021-32024

CVE-2021-32024

BlackBerry QNX Software Development Platform (SDP) — A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to poten…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.4.784 × 2015.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.

Affected

ProductAffectedFixed inSource
QNX Software Development Platform (SDP)6.4.0 – 6.6.0–CNA
QNX Software Development Platform (SDP)7.0 – 7.1–CNA

Scores by source

blackberry (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.blackberry.com/kb/articleDetail?articleNumber=000089042