by Kastro
Paper/Archive/CVE-2025-2474

CVE-2025-2474

BlackBerry QNX Software Development Platform (SDP) — Vulnerability in PCX Image Codec Impacts QNX Software Development Platform

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.2.542 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.

Affected

ProductAffectedFixed inSource
QNX Software Development Platform (SDP)8.0, 7.1 and 7.0–CNA

Scores by source

blackberry (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.blackberry.com/pkb/s/article/140646