Riskcovery

CVE-2021-32025

State
Published
Severity
8.1 High
Published
Mar 9, 2022
Updated
Aug 22, 2025
Reserved
May 3, 2021

Read the record on cve.org

Description

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hblackberry

Weaknesses

  • CWE-368 Context Switching Race Condition

Affected Products

ProductVersions
QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)BlackBerry
  • QNX SDP 6.4.0 to 7.0Affected
  • QNX Momentics all 6.3.x versionsAffected
  • QNX OS for Safety versions 1.0.0 to 1.0.2 safety products compliant with IEC 61508 and/or ISO 26262Affected
  • QNX OS for Safety versions 2.0.0 to 2.0.1 safety products compliant with IEC 61508 and/or ISO 26262Affected
  • QNX OS for Medical versions 1.0.0 to 1.1.1 safety products compliant with IEC 62304Affected
  • QNX OS for Medical versions 2.0.0 safety product compliant with IEC 62304Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.