Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
RCE
Buffer Overflow
Denial Of Service
Qnx Software Development Platform
Blackberry
+2
NVD
CVSS 2.0
7.8
EPSS
3.7%