CVE-2024-48858

7.5 highEPSS 0.6%

High (7.5) in blackberry qnx software development platform. EPSS 0.6% chance of exploitation in the next 30 days.

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-1287
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blackberry:qnx_software_development_platform

References

https://support.blackberry.com/pkb/s/article/140334

Check your stack JSON