CVE-2021-22156

32

FAUCET Score

CVE-2021-22156 is an integer overflow vulnerability in the calloc() function of the C runtime library affecting BlackBerry QNX Software Development Platform, QNX OS for Medical, and QNX OS for Safety. This critical vulnerability (CVSS 9.8) allows an unauthenticated attacker to remotely achieve denial of service or arbitrary code execution with low attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 6.5.0CPE matchmatch criteria	cpe:2.3:a:blackberry:qnx_software_development_platform::::::::
		6.5.0CPE matchmatch criteria	cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:-::::::
		6.5.0CPE matchmatch criteria	cpe:2.3:a:blackberry:qnx_software_development_platform:6.5.0:sp1::::::
		<= 1.1.1CPE matchmatch criteria	cpe:2.3:o:blackberry:qnx_os_for_medical::::::::
		<= 1.0.2CPE matchmatch criteria	cpe:2.3:o:blackberry:qnx_os_for_safety::::::::

CVSS Data

CVSS version used by this source: 3.1

9.0CRITICAL

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.2

Impact Score

6.0

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.80%

Probability of exploitation in next 30 days

EPSS Percentile

76.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0180 is in the 64th percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

apachepatch availablevia llm_extracted

dogukanurkerpatch availablevia llm_extracted

hppatch availablevia llm_extracted

kenticopatch availablevia llm_extracted

kongpatch availablevia llm_extracted

linuxpatch availablevia llm_extracted

bentomlvendor investigatingvia llm_extracted

Vendor Advisories (7)

apachellm-apache-7085d595227fc435MEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

hpllm-hp-4084fa6e3da03943MEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

dogukanurkerllm-dogukanurker-448b47bc288716cdMEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

kenticollm-kentico-648b8f9c843d795eMEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

kongllm-kong-287da1e4235c27f9MEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

bentomlllm-bentoml-1cb764f91b789287MEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

linuxllm-linux-be7b02e7883a6573MEDIUM

Niagara QNX BadAlloc, Privilege Escalation, and JxBrowser Vulnerabilities

References

support.blackberry.com / kb/articleDetail

PatchVendor Advisory

tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL

Third Party Advisory