CVE-2013-2687

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

• CWE-119

• http://aluigi.altervista.org/adv/qnxph_1-adv.txtExploit
• http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01Patch, US Government Resource
• http://www.qnx.com/download/feature.html?programid=24850Patch
• http://aluigi.altervista.org/adv/qnxph_1-adv.txtExploit
• http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01Patch, US Government Resource
• http://www.qnx.com/download/feature.html?programid=24850Patch

Published

Jul 12, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2681Cisco Linksys E4200 1.0.05 Build 7 devices contain a Securit…9.8
• CVE-2013-2682Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickja…4.3
• CVE-2013-2683Cisco Linksys E4200 1.0.05 Build 7 devices contain an Inform…5.3
• CVE-2013-2684Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Bui…6.1
• CVE-2013-2685Stack-based buffer overflow in res/res_format_attr_h264.c in…
• CVE-2013-2686main/http.c in the HTTP server in Asterisk Open Source 1.8.x…
• CVE-2013-2688Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS t…
• CVE-2013-2690SQL injection vulnerability in index.php in Synchroweb Techn…
• CVE-2013-2691Stack-based buffer overflow in the JetMPG.ax module in jetAu…
• CVE-2013-2692Cross-site request forgery (CSRF) vulnerability in the Admin…
• CVE-2013-2693Cross-site request forgery (CSRF) vulnerability in the Optio…
• CVE-2013-2694Open redirect vulnerability in invite.php in the WP Symposiu…