CVE-2026-40272 — Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform

CVE-2026-40272

Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform PUBLISHED

Description (CNA)

Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.

Affected (CNA)

Vendor / product	Versions
BlackBerry Ltd / QNX Software Development Platform	affected 8.0; affected cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:::::::; affected 7.1; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:::::::; affected 7.0; affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:::::::*

CWE

CWE-1284

References

https://support.blackberry.com/pkb/s/article/141229

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.