Memory Access Flaw in QVM Affects BlackBerry Products
CVE-2026-50077

7.7HIGH

Key Information:

Vendor

Blackberry Ltd

Status
Qnx Hypervisor
Qnx Hypervisor For Safety
Vendor
CVE Published:
10 November 2026

What is CVE-2026-50077?

An invalid memory access vulnerability in the QVM component of BlackBerry products could empower a malicious guest to execute arbitrary code. This flaw raises concerns around memory corruption and potential information leakage, alongside the risk of causing a crash in the QVM environment. Users should remain vigilant regarding system updates and apply necessary patches to mitigate potential attacks.

Affected Version(s)

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:8.0:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.2:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.0:*:*:*:*:*:*:*

References

https://support.blackberry.com/pkb/s/article/141343

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.