QNX Software Development Platform vulnerabilities
12 known vulnerabilities in QNX Software Development Platform from BlackBerry. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
QNX Software Development Platform: Heap-based Buffer Overflow
Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.
- 8.4 High severity
QNX Software Development Platform: Heap-based Buffer Overflow
Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.
- 7.0 High severity
QNX Software Development Platform: Improper Validation of Specified Quantity in Input
Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.
- 7.4 High severity
QNX Software Development Platform: Stack-based Buffer Overflow
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
- 9.8 Critical severity
QNX Software Development Platform (SDP): Out-of-bounds Write
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Improper Validation of Specified Type of Input
Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): NULL Pointer Dereference
NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
- 9.8 Critical severity
QNX Software Development Platform (SDP): Out-of-bounds Write
Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Out-of-bounds Read
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
- 7.5 High severity
QNX Software Development Platform (SDP): Off-by-one Error
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
- 9.0 Critical severity
QNX Software Development Platform (SDP): Improper Validation of Specified Type of Input
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.
- 7.1 High severity
QNX Software Development Platform (SDP): Improper Validation of Consistency within Input
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.