CVE-2024-35213

9.0 criticalEPSS 0.5%

Critical (9.0) in blackberry qnx software development platform. EPSS 0.5% chance of exploitation in the next 30 days.

An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-1287
Published: 2024-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blackberry:qnx_software_development_platform

References

https://support.blackberry.com/pkb/s/article/139914
https://support.blackberry.com/pkb/s/article/139914

Check your stack JSON