CVE-2021-32024 CRITICAL

CVE-2021-32024

Vendor Blackberry
Product QNX Software Development Platform (SDP)
Weakness CWE-1287
Published December 13, 2021
Last update September 9, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.

Key dates

02Disclosure timeline

December 13, 2021 CVE published
September 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-40911 Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses CVE-2024-5594 CVE-2023-3900 Improper Validation of Specified Type of Input in GitLab CVE-2025-8402 Nil pointer dereference in bulk import crashes server CVE-2026-33806 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header