Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-40273 EUVD-2026-122692GHSA-h6ff-fpvx-49qm

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause …

Published Nov 10, 2026 · Assigned by blackberry

Description

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel

Affected products

VendorProductAffectedFixed
BlackBerry QNX Software Development Platform (SDP) cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:4:*:*:*:*:*:* —
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:* —
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:* —
BlackBerry QNX Software Development Platform (SDP) cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* —
BlackBerry QNX OS for Medical cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:* —

References