VULNERABILITY INTELLIGENCE

CVE-2024-48855

CVSS score5.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.

Weakness classification

  • secure@blackberry.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references