← CVE Intelligence

CVE-2025-8090

Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety PUBLISHED

Description (CNA)

Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

Affected (CNA)

Vendor / product	Versions
BlackBerry Ltd / QNX Software Development Platform	affected 7.1 and 7.0; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::
BlackBerry Ltd / QNX OS for Safety	affected 2.2.7 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7::::::; affected 2.1.4 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4::::::; affected 2.0.2 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2::::::
BlackBerry Ltd. / QNX OS for Medical	affected 2.0.1 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1::::::

CWE

CWE-476

References

https://support.blackberry.com/pkb/s/article/141027

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.