CVE-2024-48855 — Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform

CVE-2024-48855

Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform PUBLISHED

Description (CNA)

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.

Affected (CNA)

Vendor / product	Versions
BlackBerry / QNX Software Development Platform (SDP)	affected 8.0, 7.1 and 7.0

CWE

CWE-125

References

https://support.blackberry.com/pkb/s/article/140334

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.