Back to Database
Status published
Medium
CVE-2024-48855
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
Vulnerability Description
Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-48855
Credits & Attribution
No credits recorded in the NVD database.
More from BlackBerry
View All →CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
Critical
9.8
CVE-2025-12766
Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
Medium
5
CVE-2024-51723
Vulnerability in Management Console Impacts BlackBerry AtHoc
Medium
4.6
CVE-2024-51722
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Medium
6.4
CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
High
7.3
Affected Vendor
BlackBerry
View all reports →Affected Software
QNX Software Development Platform (SDP)
Vulnerable Versions:
8.0, 7.1 and 7.0
Timeline
Official Publish:
January 14th, 2025
Last Modified:
February 12th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N