{"id":53042,"date":"2025-06-17T12:22:14","date_gmt":"2025-06-17T12:22:14","guid":{"rendered":""},"modified":"2025-06-25T11:19:55","modified_gmt":"2025-06-25T17:19:55","slug":"cve-2025-2474-critical-out-of-bounds-write-vulnerability-in-qnx-sdp-s-pcx-image-codec","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-2474-critical-out-of-bounds-write-vulnerability-in-qnx-sdp-s-pcx-image-codec\/","title":{"rendered":"CVE-2025-2474: Critical Out-of-bounds Write Vulnerability in QNX SDP’s PCX Image Codec<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-2474 is a severe security vulnerability in the PCX image codec used by QNX Software Development Platform (SDP) versions 8.0, 7.1 and 7.0. This vulnerability could allow an unauthenticated attacker to exploit an out-of-bounds write condition, leading to a potential denial of service or even the execution of arbitrary code. Given the ubiquity of the QNX SDP in a variety of critical infrastructure systems, this vulnerability could have expansive and potentially<\/a> devastating implications if left unaddressed.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-2474
\nSeverity: Critical, CVSS Score 9.8
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise<\/a> or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n