CVE-2024-48854 — Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform

CVE-2024-48854

Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform PUBLISHED

Description (CNA)

Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.

Affected (CNA)

Vendor / product	Versions
BlackBerry / QNX Software Development Platform (SDP)	affected 8.0, 7.1 and 7.0

CWE

CWE-193

References

https://support.blackberry.com/pkb/s/article/140334

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.