Qnx Software Development Platform
Vendor:
First CVE: Jul 12, 2013 · Active for 13 years
21
Total CVEs
More Total CVEs than 95% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Qnx Software Development Platform over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 12, 2013
13 years ago
Most Recent CVE
Jun 10, 2025
412 days ago
CVE Severity & Scoring
Qnx Software Development Platform21 CVEs
19%
52%
29%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local4 (19.0%)
Network15 (71.4%)
Unknown2 (9.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (76.2%)
High3 (14.3%)
Unknown2 (9.5%)
User Interaction
None19 (90.5%)
Unknown2 (9.5%)
Required0 (0.0%)
Privileges Required
Low3 (14.3%)
High1 (4.8%)
None15 (71.4%)
Unknown2 (9.5%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-22156CRITICAL An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 | Aug 17, 2021 | 9.8 | 32 | NO | NO |
CVE-2025-2474CRITICAL Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in th | Jun 10, 2025 | 9.8 | 30 | NO | NO |
CVE-2021-32024CRITICAL A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the a | Dec 13, 2021 | 9.8 | 30 | NO | NO |
CVE-2024-48856CRITICAL Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in th | Jan 14, 2025 | 9.8 | 27 | NO | NO |
CVE-2024-35213CRITICAL An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition | Jun 11, 2024 | 9.0 | 27 | NO | NO |
CVE-2020-6932CRITICAL An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow | Aug 12, 2020 | 9.8 | 27 | NO | NO |
CVE-2013-2687HIGH Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Softw | Jul 12, 2013 | 7.8 | 27 | NO | NO |
CVE-2021-32025HIGH An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versio | Mar 10, 2022 | 7.8 | 25 | NO | NO |
CVE-2017-3892HIGH In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain inf | Nov 14, 2017 | 7.5 | 23 | NO | NO |
CVE-2017-3891HIGH In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks compr | Nov 14, 2017 | 8.1 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Qnx Software Development Platform
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0 | 6 | 8.3 | 0.5% | 0 | 0 |
| 7.1 | 7 | 8.1 | 0.4% | 0 | 0 |
| 7.0 | 7 | 8.1 | 0.4% | 0 | 0 |
| 6.6.0 | 6 | 6.8 | 0.7% | 0 | 0 |
| 6.5.0 | 3 | 6.9 | 1.1% | 0 | 0 |