https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2474.htmlhttps://patchthecve.com/cve/CVE-2025-2474.htmlWed, 17 Jun 2026 09:07:01 +0000CRITICAL 9.8: Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-48858.htmlhttps://patchthecve.com/cve/CVE-2024-48858.htmlWed, 17 Jun 2026 07:58:54 +0000HIGH 7.5: Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-48857.htmlhttps://patchthecve.com/cve/CVE-2024-48857.htmlWed, 17 Jun 2026 07:58:54 +0000HIGH 7.5: NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-48856.htmlhttps://patchthecve.com/cve/CVE-2024-48856.htmlWed, 17 Jun 2026 07:58:54 +0000CRITICAL 9.8: Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-48855.htmlhttps://patchthecve.com/cve/CVE-2024-48855.htmlWed, 17 Jun 2026 07:58:54 +0000MEDIUM 5.3: Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-48854.htmlhttps://patchthecve.com/cve/CVE-2024-48854.htmlWed, 17 Jun 2026 07:58:53 +0000MEDIUM 5.3: Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.https://patchthecve.com/cve/CVE-2024-35215.htmlhttps://patchthecve.com/cve/CVE-2024-35215.htmlWed, 17 Jun 2026 07:34:33 +0000MEDIUM 6.2: NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.https://patchthecve.com/cve/CVE-2024-35213.htmlhttps://patchthecve.com/cve/CVE-2024-35213.htmlWed, 17 Jun 2026 07:34:33 +0000CRITICAL 9.0: An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.