Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-54437 EUVD-2026-122788GHSA-2qpr-5p8f-j5q5

Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by blackberry

Description

Improper Input Validation in the io-char library's
DCMD_CHR_TCINJECTC devctl() handler could allow an attacker with local access
to cause data tampering in the memory input buffer of the Character I/O device
driver.

Affected products

VendorProductAffectedFixed
BlackBerry QNX Software Development Platform cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —

References