Out-Of-Bounds Read Vulnerability in QVM by BlackBerry
CVE-2026-50078

4.4MEDIUM

Key Information:

Vendor

Blackberry Ltd

Status
Qnx Hypervisor
Qnx Hypervisor For Safety
Vendor
CVE Published:
10 November 2026

What is CVE-2026-50078?

The Out-Of-Bounds Read vulnerability in the QVM from BlackBerry presents a risk where an attacker operating within the guest environment could exploit this flaw to read unintended memory locations. This could potentially lead to unauthorized information disclosure or cause instability that results in a crash of the QVM. Maintaining updated versions and implementing security measures is crucial to mitigate the associated risks.

Affected Version(s)

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:8.0:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.2:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.0:*:*:*:*:*:*:*

References

https://support.blackberry.com/pkb/s/article/141343

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.