CVE-2025-2474CWE-787

Vulnerability in PCX Image Codec Impacts QNX Software Development Platform

Critical · published June 10, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🚨 A sneaky out-of-bounds write in the PCX image codec could let an unauthenticated attacker crash your system or run rogue code! 🔥 Think of this like a construction worker accidentally knocking down a load-bearing wall — it could bring the whole building down or let anyone waltz in and take control. In this case, the PCX codec is your wall, and if it's not properly fortified, the consequences could be disastrous! An attacker could exploit this vulnerability to trigger a denial-of-service condition, sending your system into a tailspin and making vital services unavailable. Even worse, they could execute arbitrary code, potentially gaining complete control over the affected process. That's a recipe for chaos!

Put simply

Think of this like a construction worker accidentally knocking down a load-bearing wall — it could bring the whole building down or let anyone waltz in and take control. In this case, the PCX codec is your wall, and if it's not properly fortified, the consequences could be disastrous! This out-of-bounds write vulnerability in the PCX image codec of QNX SDP versions 8.0, 7.1, and 7.0 allows attackers to manipulate memory outside the bounds of allocated space, leading to crashes or arbitrary code execution.

What to do

An attacker could exploit this vulnerability to trigger a denial-of-service condition, sending your system into a tailspin and making vital services unavailable. Even worse, they could execute arbitrary code, potentially gaining complete control over the affected process. That's a recipe for chaos! Quickly patch your systems to the latest version of QNX SDP that addresses this vulnerability. Ensure your image codec libraries are updated and review related code to understand potential impacts. Don't leave this unaddressed — you don't want to be the one who forgot to reinforce that wall! You've got this! Follow these steps, and you'll keep your fortress secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-06-10T17:38Z
EPSS history
Timeline
  • 10 JUN 17:38Z
    Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
    cvelistv5