CVE-2025-2474

Katalog CVE

CVSS 9.8 · Critical EPSS 0,73%

Kerentanan Out-of-bounds Write pada blackberry qnx software development platform. Skor CVSS 3.1 9.8 (Critical) menurut blackberry.com.

Deskripsi (NVD)

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.

Rincian

Terbit di NVD

10 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber blackberry.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,73% peluang dieksploitasi; lebih tinggi dari 52,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.blackberry.com/pkb/s/article/140646 advisory vendor