CVE-2024-48858

Katalog CVE

CVSS 7.5 · High EPSS 0,57%

Kerentanan Improper Validation of Specified Type of Input pada blackberry qnx software development platform. Skor CVSS 3.1 7.5 (High) menurut blackberry.com.

Deskripsi (NVD)

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

Rincian

Terbit di NVD

14 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber blackberry.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1287: Improper Validation of Specified Type of Input

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.blackberry.com/pkb/s/article/140334 advisory vendor