An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HBlackberry Qnx Software Development Platform
APPBlackberry≤ 6.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2025-2474CRITICAL9.8PL ✓ten sam produkt
Out-of-bounds write w kodeku PCX w BlackBerry QNX SDP — RCE i DoS
CVE-2024-48856CRITICAL9.8PL ✓ten sam produkt
Out-of-bounds write w kodeku PCX w BlackBerry QNX SDP — RCE i DoS
CVE-2024-35213CRITICAL9.0PL ✓ten sam produkt
Podatność improper input validation w SGI Image Codec QNX SDP
CVE-2021-32024CRITICAL9.8ten sam produkt
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could...
CVE-2021-22156CRITICAL9.0ten sam produkt
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of Bl...