CVE-2026-4017
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
QNX Software Development Platform
- Vendor
- BlackBerry Ltd
- Product
- QNX Software Development Platform
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |
| 7.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |
QNX OS for Safety
- Vendor
- BlackBerry Ltd
- Product
- QNX OS for Safety
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.2.8 and earlier | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |
| 2.1.5 and earlier | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |
| 2.0.3 and earlier | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |
QNX OS for Medical
- Vendor
- BlackBerry Ltd.
- Product
- QNX OS for Medical
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.0.2 and earlier | affected | Unavailable | Unavailable | Unavailable | None listed |
| cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:* | affected | cpe | Unavailable | Unavailable | None listed |