{"id":"CVE-2024-35215","state":"PUBLISHED","title":"NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with loca","description":"NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process.","publishedAt":"2024-10-08T17:35:57.156Z","updatedAt":"2025-08-22T15:47:01.556Z","severity":{"score":6.2,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"blackberry"},"assigner":"blackberry","products":["BlackBerry QNX Software Development Platform (SDP)"],"affected":[{"vendor":"BlackBerry","product":"QNX Software Development Platform (SDP)","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected","lessThanOrEqual":"7.1","versionType":"custom"}]}],"references":["https://support.blackberry.com/pkb/s/article/140162"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/35xxx/CVE-2024-35215.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-35215","state":"PUBLISHED","datePublished":"2024-10-08T17:35:57.156Z","dateUpdated":"2025-08-22T15:47:01.556Z","assignerShortName":"blackberry","assignerOrgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateReserved":"2024-05-13T21:20:04.328Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process."}],"affected":[{"vendor":"BlackBerry","product":"QNX Software Development Platform (SDP)","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected","lessThanOrEqual":"7.1","versionType":"custom"}]}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/140162"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","description":"CWE-476 NULL Pointer Dereference","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"blackberry","orgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateUpdated":"2025-08-22T15:47:01.556Z"},"datePublic":"2024-10-08T17:35:00.000Z","impacts":[{"capecId":"CAPEC-549","descriptions":[{"lang":"en","value":"CAPEC-549 Local Execution of Code"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-08T18:35:30.013530Z","id":"CVE-2024-35215","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-08T18:36:04.799Z"}}]}}}