Description
Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BlackBerry | QNX Software Development Platform | cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* | — |
| BlackBerry | QNX OS for Safety | cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:4:*:*:*:*:*:* | — |
| BlackBerry | QNX OS for Medical | cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:* | — |