← Back

CVE-2021-32025

nvd nist
Published: Mar 10, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.

Affected (7)

Blackberry
4 products
Qnx Momentics
Qnx Os For Medical
Qnx Os For Safety
Qnx Software Development Platform
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Blackberry
Qnx Momentics
Version 6.3.0
Qnx Momentics
Version 6.3.2
Blackberry
Qnx Os For Medical
From 1.0 to 1.1.2
Qnx Os For Medical
Version 2.0.0
Blackberry
Qnx Os For Safety
From 1.0.0 to 1.0.3
Qnx Os For Safety
From 2.0.0 to 2.0.2
Qnx Software Development Platform
From 6.4.0 to 7.0

Related CWEs

CWE-368
Context Switching Race Condition
A product performs a series of non-atomic actions to switch between contexts that cross privilege or other security boundaries, but a race condition allows an attacker to modify or misrepresent the product's behavior during the switch.

References (2)

Source: secure@blackberry.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.