An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HBlackberry Qnx Software Development Platform
APPBlackberry≤ 6.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2025-2474CRITICAL9.8PL ✓same product
Out-of-bounds write w kodeku PCX w BlackBerry QNX SDP — RCE i DoS
CVE-2024-48856CRITICAL9.8PL ✓same product
Out-of-bounds write w kodeku PCX w BlackBerry QNX SDP — RCE i DoS
CVE-2024-35213CRITICAL9.0PL ✓same product
Podatność improper input validation w SGI Image Codec QNX SDP
CVE-2021-32024CRITICAL9.8PL ✓same product
RCE w kodeku obrazów BMP w BlackBerry QNX SDP
CVE-2021-22156CRITICAL9.0PL ✓same product
Integer overflow w calloc() w BlackBerry QNX — RCE i DoS