CVE-2024-48854
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| BlackBerry | QNX Software Development Platform (SDP) | 8.0, 7.1 and 7.0 | affected |
Weaknesses
- CWE-193: CWE-193 Off-by-one Error
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.