Medium severity · published Oct 8, 2024
CVE-2024-35215
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with…
6.2
CVSS
0.2%
EPSS
No
On KEV
Description
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
QNX Software Development Platform (SDP) · BlackBerry
7.0 through 7.1 · source: vendor
QS
Qnx Software Development Platform · Blackberry
7.0 before 8.0 · source: NVD
Affected product
QS
QNX Software Development Platform (SDP)
BlackBerry
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-35215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-35215
Vendor Advisory
https://support.blackberry.com/pkb/s/article/140162
More from QNX Software Development Platform (SDP)
9.8
CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
9.8
CVE-2024-48856
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
9.0
CVE-2024-35213
Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)
7.5
CVE-2024-48858
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
7.5
CVE-2024-48857
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform