Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-40272

Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
blackberry

Description

Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BlackBerry Ltd QNX Software Development Platform

Default version status: unaffected

  • 8.0affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:8.0:*:*:*:*:*:*:*affected
  • 7.1affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*affected
  • 7.0affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*affected

References