CVE-2008-3024: Blackberry Qnx Momentics

High severity, CVSS 9.3. EPSS: 5.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.

Affected products

• Blackberry Qnx Momentics: up to and including 6.3.2

Published 2008-07-07. Last modified 2026-06-16.