CVE-2025-2474 – QNX SDP PCX Image Codec Out-of-Bounds Write Denial-of-Service/Execution of Arbitrary Code

June 10, 2025

CVE ID : CVE-2025-2474

Published : June 10, 2025, 6:15 p.m. | 3 hours, 33 minutes ago

Description : Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-36574 – Dell Wyse Management Suite Absolute Path Traversal Vulnerability

Next Article CVE-2025-32710 – Microsoft Windows Remote Desktop Services Use-After-Free Remote Code Execution Vulnerability

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

5 preinstalled apps you should delete from your Samsung phone immediately

Ubuntu Linux lagging? Try my 10 go-to tricks to speed it up

How I survived a week with this $130 smartwatch instead of my Garmin and Galaxy Ultra

YouTube is using AI to verify your age now – and if it’s wrong, that’s on you to fix

Time-Controlled Data Processing with Laravel LazyCollection Methods

Time-Controlled Data Processing with Laravel LazyCollection Methods

Create Apple Wallet Passes in Laravel

The Laravel Idea Plugin is Now FREE for PhpStorm Users

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

Opera throws Microsoft to Brazil’s watchdogs for promoting Edge as your default browser — “Microsoft thwarts‬‭ browser‬‭ competition‬‭‬‭ at‬‭ every‬‭ turn”

Activision once again draws the ire of players for new Diablo Immortal marketing that appears to have been made with generative AI

CVE-2025-2474 – QNX SDP PCX Image Codec Out-of-Bounds Write Denial-of-Service/Execution of Arbitrary Code

CVE-2025-43234 – Apple WatchOS/IOS/iPadOS/tvOS/macOS VisionOS Texture Corruption Vulnerability

CVE-2025-43237 – Apple macOS Sequoia Write Access Vulnerability

CVE-2025-4461 – TOTOLINK N150RT Cross-Site Scripting Vulnerability

This week in AI dev tools: Gemini API Batch Mode, Amazon SageMaker AI updates, and more (July 11, 2025)

AREAL: Accelerating Large Reasoning Model Training with Fully Asynchronous Reinforcement Learning

First Ubuntu Monthly Snapshot Now Available to Download

CVE-2025-43556 – Animate Integer Overflow or Wraparound Vulnerability (Arbitrary Code Execution)

ereandel is a Gemini web browser using shell script

CVE-2025-7107 – SimStudioAI Sim Path Traversal Vulnerability

CVE-2025-53110 – Filesystem Model Context Protocol Servers Directory Traversal Vulnerability

CVE-2025-2474 – QNX SDP PCX Image Codec Out-of-Bounds Write Denial-of-Service/Execution of Arbitrary Code

Related Posts