CVEvulnerability
CVE-2021-32024
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-1287
Description
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.
Affected configurations
• blackberry qnx software development platform (>= 6.4.0 <= 7.1)
Related
Weakness · CWE (1)
- CWE-1287 Improper Validation of Specified Type of Input weakness
References
- http://support.blackberry.com/kb/articleDetail?articleNumber=000089042 Patch, Vendor Advisory
- http://support.blackberry.com/kb/articleDetail?articleNumber=000089042 Patch, Vendor Advisory