Approved changes feed: RSS · Atom

cpe:2.3:a:blackberry_ltd:qnx_software_development_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBlackberry Ltd (56b4fef1-edc5-5753-bfda-8e58fa372118)
ProductQnx Software Development Platform (42a19a3d-7326-5999-94df-f3c268704e97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4018 vulnerable 2026-07-29 00:57:45.858069 TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
MEDIUM (6.4)
TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Published: 2026-07-14T17:34:01.952Z
Updated: 2026-07-15T14:01:13.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4017 vulnerable 2026-07-29 00:57:45.855522 Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
HIGH (7.4)
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Published: 2026-07-14T17:25:13.128Z
Updated: 2026-07-14T23:36:28.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0515 vulnerable 2026-07-29 00:20:51.118280 Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
MEDIUM (6.2)
Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.
Published: 2026-07-14T17:13:07.258Z
Updated: 2026-07-14T23:35:27.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8090 vulnerable 2026-06-08 07:45:19.419825 Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety
MEDIUM (6.2)
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
Published: 2026-01-13T16:36:21.061Z
Updated: 2026-01-13T21:41:51.831Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.