CVEvulnerability

CVE-2021-32025

7.8 HIGH Published 2022-03-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-368

Description

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.

Affected configurations

• blackberry qnx momentics 6.3.0 • blackberry qnx momentics 6.3.2 • blackberry qnx software development platform (>= 6.4.0 <= 7.0) • blackberry qnx os for medical (>= 1.0 < 1.1.2) • blackberry qnx os for medical 2.0.0 • blackberry qnx os for safety (>= 1.0.0 < 1.0.3) • blackberry qnx os for safety (>= 2.0.0 < 2.0.2)

Related

Weakness · CWE (1)

  • CWE-368 Context Switching Race Condition weakness

References