Skip to content
OpenAdvisories
High · 7.4 CVE-2026-54436 EUVD-2026-122791GHSA-v2x4-cfj4-7hfw

Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by blackberry

Description

Heap-based Buffer
Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could
allow an attacker with local access to cause data tampering, arbitrary code
execution, or a crash in the Character I/O device driver.

Affected products

VendorProductAffectedFixed
BlackBerry QNX Software Development Platform cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —

References