BlackBerry vulnerabilities
We track 18 vulnerabilities in BlackBerry products across 12 products. 17 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest BlackBerry vulnerabilities
- 7.7 High severity
QNX Hypervisor: Out-of-bounds Write
Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the QVM to cause memory corruption, information disclosure or a crash of the QVM.
- 7.4 High severity
QNX Software Development Platform: Heap-based Buffer Overflow
Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.
- 8.4 High severity
QNX Software Development Platform: Heap-based Buffer Overflow
Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.
- 7.0 High severity
QNX Software Development Platform: Improper Validation of Specified Quantity in Input
Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.
- 7.4 High severity
QNX Software Development Platform: Stack-based Buffer Overflow
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
- 9.8 Critical severity
QNX Software Development Platform (SDP): Out-of-bounds Write
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Improper Validation of Specified Type of Input
Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): NULL Pointer Dereference
NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
- 9.8 Critical severity
QNX Software Development Platform (SDP): Out-of-bounds Write
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Out-of-bounds Read
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Off-by-one Error
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
- 7.3 High severity
SecuSUITE: Improper Link Resolution Before File Access
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privil
- 7.1 High severity
CylanceOPTICS for Windows: Authentication Bypass Using an Alternate Path or Channel
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT
- 9.0 Critical severity
QNX Software Development Platform (SDP): Improper Validation of Specified Type of Input
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.
- 7.1 High severity
QNX Software Development Platform (SDP): Improper Validation of Consistency within Input
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.
- 7.2 High severity
AtHoc: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration o
- 6.5 Medium severity
SaltStack Salt Path Traversal Exploited
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
- 9.8 Critical severity
Apache Tomcat Improper Privilege Management Exploited
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attac