← CVE Intelligence

CVE-2026-4017

Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety PUBLISHED

Description (CNA)

Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Affected (CNA)

Vendor / productVersions
BlackBerry Ltd / QNX Software Development Platformaffected 7.1; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*; affected 7.0; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*
BlackBerry Ltd / QNX OS for Safetyaffected 2.2.8 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*; affected 2.1.5 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*; affected 2.0.3 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*
BlackBerry Ltd. / QNX OS for Medicalaffected 2.0.2 and earlier; affected cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.