QNX SDP TIFF Image Codec Out-of-Bounds Read Vulnerability Allowing Information Disclosure

An out-of-bounds read vulnerability has been identified in the TIFF image codec of QNX Software Development Platform (SDP) versions 8.0, 7.1, and 7.0. This vulnerability could allow an unauthenticated attacker to cause information disclosure in the context of the process using the image codec, by inducing the system to parse a maliciously crafted TIFF image file.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure within the process that is using the affected image codec.

Remediation

Users are advised to update to the latest version of the QNX image codecs. These updates are available through the QNX Software Center. QNX SDP 8.0 users should update to version 0.0.1.00077T202410011913L, QNX SDP 7.1 users should update to version 0.0.7.00759T202410010845L, and QNX SDP 7.0 users should update to version 7.0.7094.L202410281606.