CVE-2024-35213

Published: Jun 11, 2024Modified: Jun 17, 2026

9.0

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 6.0

Source: secure@blackberry.com (Secondary)

Description

An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.

Affected (1)

Products: Blackberry: Qnx Software Development Platform

Blackberry

1 product

Qnx Software Development Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Blackberry Qnx Software Development Platform	From 6.6.0 to 8.0

Related CWEs

CWE-1287

Improper Validation of Specified Type of Input

The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (2)

https://support.blackberry.com/pkb/s/article/139914

Source: secure@blackberry.com

Vendor Advisory

https://support.blackberry.com/pkb/s/article/139914

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.