by Kastro
Paper/Archive/CVE-2024-35213

CVE-2024-35213

BlackBerry QNX Software Development Platform (SDP) — Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)

EPSS 0.5%CVSS 9.0
critical.is priorityof 100
36
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 43.9.439 × 208.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.

Affected

ProductAffectedFixed inSource
QNX Software Development Platform (SDP)6.6.0 – 7.1–CNA
qnx_software_development_platform6.6.0–CISA-ADP
qnx_software_development_platform7.0–CISA-ADP
qnx_software_development_platform7.1–CISA-ADP

Scores by source

blackberry (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.blackberry.com/pkb/s/article/139914