Skip to content
OpenAdvisories
Medium · 6.2 CVE-2025-8090 EUVD-2026-2075GHSA-j5j7-j8wm-qv7r

Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety

Published Jan 13, 2026 · Updated Jan 13, 2026 · Assigned by blackberry

Vendor: BlackBerry Product: QNX OS for Medical Product: QNX OS for Safety Product: QNX Software Development Platform

Description

Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

Affected products

VendorProductAffectedFixed
BlackBerry QNX Software Development Platform 7.1 and 7.0, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —
BlackBerry QNX OS for Safety 2.2.7 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*, 2.1.4 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*, 2.0.2 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:* —
BlackBerry QNX OS for Medical 2.0.1 and earlier, cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:* —

References