High severity · published Jan 14, 2025
CVE-2024-48854
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
QNX Software Development Platform (SDP) · BlackBerry
8.0, 7.1 and 7.0 · source: vendor
QS
Qnx Software Development Platform · Blackberry
7.0; 7.1; 8.0 · source: NVD
Affected product
QS
QNX Software Development Platform (SDP)
BlackBerry
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-48854
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-48854
Vendor Advisory
https://support.blackberry.com/pkb/s/article/140334
More from QNX Software Development Platform (SDP)
9.8
CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
9.8
CVE-2024-48856
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
9.0
CVE-2024-35213
Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)
7.5
CVE-2024-48858
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
7.5
CVE-2024-48857
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform