CVE-2024-35213
Last modified
CVE-2024-35213 is a critical-severity vulnerability rated 9/10 on the CVSS scale. An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blackberry | Qnx Software Development Platform | >= 6.6.0, < 8.0 |
References
- https://support.blackberry.com/pkb/s/article/139914Vendor Advisory
- https://support.blackberry.com/pkb/s/article/139914Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-35213?
How severe is CVE-2024-35213?
How do I fix CVE-2024-35213?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-35208A vulnerability has been identified in SINEC Traffic Analyze…5.5
- CVE-2024-35209A vulnerability has been identified in SINEC Traffic Analyze…6.9
- CVE-2024-3521A vulnerability was found in Byzoro Smart S80 Management Pla…4.7
- CVE-2024-35210A vulnerability has been identified in SINEC Traffic Analyze…5.1
- CVE-2024-35211A vulnerability has been identified in SINEC Traffic Analyze…6.8
- CVE-2024-35212A vulnerability has been identified in SINEC Traffic Analyze…6.9
- CVE-2024-35214A tampering vulnerability in the CylanceOPTICS Windows Insta…7.1
- CVE-2024-35215NULL pointer dereference in IP socket options processing of …6.2
- CVE-2024-35218Umbraco CMS is an ASP.NET CMS used by more than 730.000 webs…4.8
- CVE-2024-35219OpenAPI Generator allows generation of API client libraries …8.3
- CVE-2024-3522A vulnerability classified as critical has been found in Cam…8.8
- CVE-2024-35220@fastify/session is a session plugin for fastify. Requires t…7.4
Are you affected by CVE-2024-35213?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST