Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety
CVE-2026-50080

3.3LOW

Key Information:

Vendor

Blackberry Ltd

Status
Qnx Hypervisor
Qnx Hypervisor For Safety
Vendor
CVE Published:
10 November 2026

What is CVE-2026-50080?

Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request.

Affected Version(s)

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:8.0:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.2:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.0:*:*:*:*:*:*:*

References

https://support.blackberry.com/pkb/s/article/141343

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.