CVE-2024-35213

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-1287

Affected software

Vendor	Product	Versions
BlackBerry	QNX Software Development Platform (SDP)	>= 6.6.0, <= 7.1
blackberry	qnx_software_development_platform	6.6.0
blackberry	qnx_software_development_platform	7.0
blackberry	qnx_software_development_platform	7.1

References

https://support.blackberry.com/pkb/s/article/139914Vendor Advisory
https://support.blackberry.com/pkb/s/article/139914Vendor Advisory

Timeline

Published: Jun 11, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-352147.1A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an att CVE-2024-352156.2NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 a CVE-2024-352184.8Umbraco CMS is an ASP.NET CMS used by more than 730.000 websites. Stored Cross-site scripting (XSS) enable attackers that have access to bac CVE-2024-352198.3OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically gi CVE-2024-35228.8A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the f CVE-2024-352207.4@fastify/session is a session plugin for fastify. Requires the @fastify/cookie plugin. When restoring the cookie from the session store, the CVE-2024-352214.3Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how R CVE-2024-352225.9Tauri is a framework for building binaries for all major desktop platforms. Remote origin iFrames in Tauri applications can access the Tauri CVE-2024-352235.3Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the app token of the invok CVE-2024-352245.4OpenProject is the leading open source project management software. OpenProject utilizes `tablesorter` inside of the Cost Report feature. Th CVE-2024-352256.1Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access t CVE-2024-352267.3Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions tem