CVE-2021-32025

highpriority · track · 31EPSS 0.002 · 7 %ileCAEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.18% (7th) EPSS

CVSS 7.2 · high

Is it mine?

19 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.18.8highAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.1highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.1highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · secure@blackberry.com CAexploitability 1.4 · impact 6

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269USCWE-368US

affected products (19)

Products and version ranges known to be affected.

BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX SDP 6.4.0 to 7.0enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Medical versions 2.0.0 safety product compliant with IEC 62304enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Safety versions 1.0.0 to 1.0.2 safety products compliant with IEC 61508 and/or ISO 26262enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Safety versions 2.0.0 to 2.0.1 safety products compliant with IEC 61508 and/or ISO 26262enisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX Momentics all 6.3.x versionsenisa_euvdEU
BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)≤ QNX OS for Medical versions 1.0.0 to 1.1.1 safety products compliant with IEC 62304enisa_euvdEU
BlackBerry Limited QNX≤ 1.0.3fstec_bduRU
BlackBerry Limited QNX≤ 1.1.2fstec_bduRU
BlackBerry Limited QNX Momentics Development Suite≤ 6.3.2fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.6.0fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.4.1fstec_bduRU
BlackBerry Limited QNX SDP≤ 6.5.0 SP1fstec_bduRU
blackberry qnx momentics= 6.3.0nvdUScpe:2.3:a:blackberry:qnx_momentics:*:*:*:*:*:*:*:*
blackberry qnx momentics= 6.3.2nvdUScpe:2.3:a:blackberry:qnx_momentics:*:*:*:*:*:*:*:*
blackberry qnx os for medical1.0 → 1.1.2nvdUScpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:*
blackberry qnx os for medical= 2.0.0nvdUScpe:2.3:o:blackberry:qnx_os_for_medical:*:*:*:*:*:*:*:*
blackberry qnx os for safety1.0.0 → 1.0.3nvdUScpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:*
blackberry qnx os for safety2.0.0 → 2.0.2nvdUScpe:2.3:o:blackberry:qnx_os_for_safety:*:*:*:*:*:*:*:*
blackberry qnx software development platform6.4.0 → 7.0nvdUScpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2022-03-10modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan