Critical Vulnerabilities in QNX Software Development Platform Image Codecs Expose Systems to Attacks

Summary: BlackBerry’s QNX Software Development Platform (SDP) has been issued a security advisory (QNX-2024-003) due to multiple vulnerabilities in its image codecs, which could lead to serious security risks including information disclosure, denial of service, and remote code execution. These vulnerabilities affect several versions of QNX SDP and have been assigned high CVSS scores, indicating their severity. BlackBerry has released updates to address these vulnerabilities and urges affected customers to apply them promptly.

Threat Actor: Unknown | Unknown
Victim: BlackBerry | BlackBerry

Keypoints :

• Vulnerabilities tracked under CVEs CVE-2024-48854, CVE-2024-48855, CVE-2024-48856, CVE-2024-48857, and CVE-2024-48858.
• Impacts include information disclosure, denial of service, and remote code execution.
• BlackBerry recommends immediate updates and provides mitigation strategies for organizations unable to update right away.