Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-40274 EUVD-2026-122691GHSA-5xx2-38wx-p926

Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted timer event which ca…

Published Nov 10, 2026 · Assigned by blackberry

Description

Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel.

Affected products

VendorProductAffectedFixed
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:* —
BlackBerry QNX Software Development Platform (SDP) cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:* —
BlackBerry QNX Software Development Platform (SDP) cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* —
BlackBerry QNX OS for Medical cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:* —
BlackBerry QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:4:*:*:*:*:*:* —

References