Unscored severity · published Jul 12, 2013
CVE-2013-2687
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX…
–
CVSS
8.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QM
Qnx Momentics Tool Suite · Blackberry
through 6.5.0; 4.5; 4.6; 4.7; 6.5.0 · source: NVD
QN
Qnx Neutrino Rtos · Blackberry
through 6.5.0; 6.4.1; 6.5.0 · source: NVD
QS
Qnx Software Development Platform · Blackberry
All versions, or not specified · source: NVD