CVE-2024-48858
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 1287
Summary
CVE-2024-48858 is a denial-of-service vulnerability affecting QNX SDP versions 8.0, 7.1, and 7.0. The issue lies in the PCX image codec, where improper input validation allows unauthenticated attackers to introduce malicious data. This can result in the affected process crashing or becoming unresponsive, causing a denial-of-service condition. Attackers can exploit this vulnerability to disrupt services and potentially impact system availability. Users are strongly advised to update their QNX SDP installations to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.