Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety
CVE-2026-40273

4MEDIUM

Key Information:

Vendor

Blackberry Ltd

Status
Qnx Software Development Platform (sdp)
Qnx Os For Safety
Qnx Os For Medical
Vendor
CVE Published:
10 November 2026

What is CVE-2026-40273?

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel

Affected Version(s)

QNX OS for Medical cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:*

QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:*

QNX OS for Safety cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:*

References

https://support.blackberry.com/pkb/s/article/141342

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.