CVE-2026-40272: fallo de gravedad alta en BlackBerry Ltd QNX Software Development Platform
Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7epss 0.2%
Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
BlackBerry Ltd · QNX Software Development PlatformCVEs relacionadas — BlackBerry Ltd QNX Software Development Platform
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-0515MEDIUMInsufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyEPSS 0.1%CVE-2026-4017HIGHBuffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyEPSS 0.1%CVE-2025-8090MEDIUMVulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for SafetyEPSS 0.1%CVE-2026-4018MEDIUMTOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyEPSS 0.1%