blackberry qnx software development platform

Name: blackberry qnx software development platform
Brand: blackberry

productUS

cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical10high3medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-2687US	high7.8	8.22% (95th)	—	no fix	2013-07-12	—
CVE-2013-2688US	medium5.4	6.66% (94th)	—	no fix	2013-07-12	—
CVE-2020-6932US	critical9.8	3.59% (89th)	—	no fix	2020-08-12	6.4.0 → 6.6.0
CVE-2021-32024US	critical9.8	1.79% (78th)	—	no fix	2021-12-13	6.4.0 → 7.1
CVE-2021-22156US	critical9.8	1.79% (78th)	—	6.5.0	2021-08-17	2 versions
CVE-2017-3891US	high8.1OT elevated	1.28% (70th)	—	no fix	2017-11-14	= 6.6.0
CVE-2017-9371US	medium5.9	0.81% (57th)	—	no fix	2017-11-14	2 versions
CVE-2017-3892US	high7.5	0.78% (56th)	—	no fix	2017-11-14	= 6.6.0
CVE-2025-2474US	—	0.73% (54th)	—	no fix	2025-06-10	3 versions
CVE-2024-48856US	critical9.8	0.64% (50th)	—	no fix	2025-01-14	3 versions
CVE-2024-48858US	—	0.60% (48th)	—	no fix	2025-01-14	3 versions
CVE-2017-9369US	medium4.9	0.56% (46th)	—	no fix	2017-11-14	2 versions
CVE-2024-35213US	—	0.52% (44th)	—	8.0	2024-06-11	6.6.0 → 8.0
CVE-2017-3893US	high7.5	0.50% (43rd)	—	no fix	2017-11-14	= 6.6.0
CVE-2024-48857US	high7.5	0.46% (40th)	—	no fix	2025-01-14	3 versions
CVE-2024-48855US	high7.5	0.37% (31st)	—	no fix	2025-01-14	3 versions
CVE-2024-48854US	high7.5	0.37% (31st)	—	no fix	2025-01-14	3 versions
CVE-2023-32701US	high7.1	0.24% (15th)	—	no fix	2023-11-14	3 versions
CVE-2019-8998US	high7.8	0.22% (13th)	—	no fix	2019-07-12	≤ 6.5.0
CVE-2021-32025US	high7.8	0.18% (7th)	—	no fix	2022-03-10	6.4.0 → 7.0
CVE-2024-35215US	—	0.16% (5th)	—	8.0	2024-10-08	7.0 → 8.0

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-1287Improper Validation of Specified Type of Input3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.