What’s Vulnerable › Vulnerabilities
CVE-2026-4017: Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-07-14 · updated 2026-07-15
- Weakness: CWE-121
Description
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Affected products
- BlackBerry Ltd QNX OS for Safety: through 2.2.8; through 2.1.5; through 2.0.3; cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*, cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*
- BlackBerry Ltd QNX Software Development Platform: 7.1, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, 7.0, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*
- BlackBerry Ltd. QNX OS for Medical: through 2.0.2; cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*
References
Get alerted when CVE-2026-4017 or the next vulnerability affects your stack