CVE-2024-48857: Blackberry Qnx Software Development Platform

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.

Affected products

• Blackberry Qnx Software Development Platform: version 7.0 only; version 7.1 only; version 8.0 only

Published 2025-01-14. Last modified 2026-06-17.