CVE-2024-35213

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35213
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.

9.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://support.blackberry.com/pkb/s/article/139914 Vendor Advisory
https://support.blackberry.com/pkb/s/article/139914 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*
History

01 Dec 2025, 18:02

Type Values Removed Values Added
First Time Blackberry
Blackberry qnx Software Development Platform
CPE cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*
References () https://support.blackberry.com/pkb/s/article/139914 - () https://support.blackberry.com/pkb/s/article/139914 - Vendor Advisory
Information

Published : 2024-06-11 19:16

Updated : 2025-12-01 18:02

NVD link : CVE-2024-35213

Mitre link : CVE-2024-35213

CVE.ORG link : CVE-2024-35213

JSON object : View

Products Affected

blackberry

  • qnx_software_development_platform
CWE
CWE-1287

Improper Validation of Specified Type of Input