CVE-2024-48857

NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.blackberry.com/pkb/s/article/140334	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::*
	cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::*
	cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:::::::*

History

21 Jan 2025, 18:06

Type	Values Removed	Values Added
References	~~() https://support.blackberry.com/pkb/s/article/140334 -~~	() https://support.blackberry.com/pkb/s/article/140334 - Vendor Advisory
Summary		(es) La desreferencia de puntero NULL en el códec de imagen PCX en las versiones 8.0, 7.1 y 7.0 de QNX SDP podría permitir que un atacante no autenticado provoque una condición de denegación de servicio en el contexto del proceso que utiliza el códec de imagen.
First Time		Blackberry Blackberry qnx Software Development Platform
CPE		cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:::::::* cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::* cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::*

14 Jan 2025, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-14 19:15

Updated : 2025-01-21 18:06

NVD link : CVE-2024-48857

Mitre link : CVE-2024-48857

CVE.ORG link : CVE-2024-48857

JSON object : View

Products Affected

blackberry

qnx_software_development_platform

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2024-48857", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@blackberry.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-01-14T19:15:31.680", "references": [{"url": "https://support.blackberry.com/pkb/s/article/140334", "tags": ["Vendor Advisory"], "source": "secure@blackberry.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@blackberry.com", "description": [{"lang": "en", "value": "CWE-476"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec."}, {"lang": "es", "value": "La desreferencia de puntero NULL en el c\u00f3dec de imagen PCX en las versiones 8.0, 7.1 y 7.0 de QNX SDP podr\u00eda permitir que un atacante no autenticado provoque una condici\u00f3n de denegaci\u00f3n de servicio en el contexto del proceso que utiliza el c\u00f3dec de imagen."}], "lastModified": "2025-01-21T18:06:46.287", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "058D8A14-E99C-4AA9-BE27-794B8D8B9E49"}, {"criteria": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0E19A3D-96D9-4DF2-8E56-E2D917B1A9EA"}, {"criteria": "cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CD7E9BB-7B9E-4022-BE18-EA9642F54064"}], "operator": "OR"}]}], "sourceIdentifier": "secure@blackberry.com"}