CVE-2024-35213 Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)
An improper input validation flaw in the SGI Image Codec allows attackers to execute code or cause denial of service in QNX SDP.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-35213?
CVE-2024-35213 is a critical memory corruption vulnerability in BlackBerry QNX Software Development Platform (SDP), published on 11 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process.
Weakness: CWE-1287
Which versions are affected by CVE-2024-35213?
It affects 1 product.
Products include Blackberry Qnx Software Development Platform.
How do I fix CVE-2024-35213?
No fix has been published for CVE-2024-35213 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-35213 being exploited?
There is no known exploitation of CVE-2024-35213 in the wild and no public exploit code.
Other vulnerabilities in BlackBerry QNX Software Development Platform (SDP)
- CVE-2020-6932 Path traversal in QNX Software Development Platform (SDP)
- CVE-2025-2474 Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
- CVE-2024-48856 Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
- CVE-2021-32024 Memory corruption in QNX Software Development Platform (SDP)
- CVE-2017-3891 Privilege escalation in QNX Software Development Platform (QNX SDP)
Sources
Also known as GHSA-rprf-7696-jjrj.