What’s Vulnerable › Vulnerabilities
CVE-2025-8090: Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety
- Severity: medium (CVSS 6.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-01-13 · updated 2026-06-17
- Weakness: CWE-476
Description
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
Affected products
- BlackBerry Ltd QNX OS for Safety: through 2.2.7; through 2.1.4; through 2.0.2; cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:*
- BlackBerry Ltd QNX Software Development Platform: 7.1 and 7.0, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*
- BlackBerry Ltd. QNX OS for Medical: through 2.0.1; cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:*
References
Get alerted when CVE-2025-8090 or the next vulnerability affects your stack