Search
Find a vulnerability
Search criteria
2 vulnerabilities by BlackBerry Ltd
CVE-2025-8090 (GCVE-0-2025-8090)
Vulnerability from nvd – Published: 2026-01-13 16:36 – Updated: 2026-01-13 21:41
VLAI
Title
Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety
Summary
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
Severity
6.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://support.blackberry.com/pkb/s/article/141027 | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| BlackBerry Ltd | QNX Software Development Platform |
Affected:
7.1 and 7.0
(custom)
Affected: cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* (cpe) Affected: cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* (cpe) |
|
| BlackBerry Ltd | QNX OS for Safety |
Affected:
2.2.7 and earlier
(custom)
Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:* (cpe) Affected: 2.1.4 and earlier (custom) Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:* (cpe) Affected: 2.0.2 and earlier (custom) Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:* (cpe) |
|
| BlackBerry Ltd. | QNX OS for Medical |
Affected:
2.0.1 and earlier
(custom)
Affected: cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:* (cpe) |
Date Public
2026-01-13 16:25
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-8090",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-13T21:41:44.974623Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T21:41:51.831Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "QNX Software Development Platform",
"vendor": "BlackBerry Ltd",
"versions": [
{
"status": "affected",
"version": "7.1 and 7.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*",
"versionType": "cpe"
}
]
},
{
"defaultStatus": "unaffected",
"product": "QNX OS for Safety",
"vendor": "BlackBerry Ltd",
"versions": [
{
"status": "affected",
"version": "2.2.7 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "2.1.4 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "2.0.2 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:*",
"versionType": "cpe"
}
]
},
{
"defaultStatus": "unaffected",
"product": "QNX OS for Medical",
"vendor": "BlackBerry Ltd.",
"versions": [
{
"status": "affected",
"version": "2.0.1 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:*",
"versionType": "cpe"
}
]
}
],
"datePublic": "2026-01-13T16:25:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Null pointer dereference in the MsgRegisterEvent() system call could allow\u0026nbsp;an attacker with local access and code execution abilities to crash the\u0026nbsp;QNX Neutrino kernel."
}
],
"value": "Null pointer dereference in the MsgRegisterEvent() system call could allow\u00a0an attacker with local access and code execution abilities to crash the\u00a0QNX Neutrino kernel."
}
],
"impacts": [
{
"capecId": "CAPEC-129",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-129 Pointer Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T18:57:38.781Z",
"orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
"shortName": "blackberry"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://support.blackberry.com/pkb/s/article/141027"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
"assignerShortName": "blackberry",
"cveId": "CVE-2025-8090",
"datePublished": "2026-01-13T16:36:21.061Z",
"dateReserved": "2025-07-23T15:38:00.519Z",
"dateUpdated": "2026-01-13T21:41:51.831Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-8090 (GCVE-0-2025-8090)
Vulnerability from cvelistv5 – Published: 2026-01-13 16:36 – Updated: 2026-01-13 21:41
VLAI
Title
Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety
Summary
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
Severity
6.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://support.blackberry.com/pkb/s/article/141027 | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| BlackBerry Ltd | QNX Software Development Platform |
Affected:
7.1 and 7.0
(custom)
Affected: cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* (cpe) Affected: cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* (cpe) |
|
| BlackBerry Ltd | QNX OS for Safety |
Affected:
2.2.7 and earlier
(custom)
Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:* (cpe) Affected: 2.1.4 and earlier (custom) Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:* (cpe) Affected: 2.0.2 and earlier (custom) Affected: cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:* (cpe) |
|
| BlackBerry Ltd. | QNX OS for Medical |
Affected:
2.0.1 and earlier
(custom)
Affected: cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:* (cpe) |
Date Public
2026-01-13 16:25
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-8090",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-13T21:41:44.974623Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T21:41:51.831Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "QNX Software Development Platform",
"vendor": "BlackBerry Ltd",
"versions": [
{
"status": "affected",
"version": "7.1 and 7.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*",
"versionType": "cpe"
}
]
},
{
"defaultStatus": "unaffected",
"product": "QNX OS for Safety",
"vendor": "BlackBerry Ltd",
"versions": [
{
"status": "affected",
"version": "2.2.7 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "2.1.4 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*",
"versionType": "cpe"
},
{
"status": "affected",
"version": "2.0.2 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:*",
"versionType": "cpe"
}
]
},
{
"defaultStatus": "unaffected",
"product": "QNX OS for Medical",
"vendor": "BlackBerry Ltd.",
"versions": [
{
"status": "affected",
"version": "2.0.1 and earlier",
"versionType": "custom"
},
{
"status": "affected",
"version": "cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:*",
"versionType": "cpe"
}
]
}
],
"datePublic": "2026-01-13T16:25:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Null pointer dereference in the MsgRegisterEvent() system call could allow\u0026nbsp;an attacker with local access and code execution abilities to crash the\u0026nbsp;QNX Neutrino kernel."
}
],
"value": "Null pointer dereference in the MsgRegisterEvent() system call could allow\u00a0an attacker with local access and code execution abilities to crash the\u00a0QNX Neutrino kernel."
}
],
"impacts": [
{
"capecId": "CAPEC-129",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-129 Pointer Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T18:57:38.781Z",
"orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
"shortName": "blackberry"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://support.blackberry.com/pkb/s/article/141027"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
"assignerShortName": "blackberry",
"cveId": "CVE-2025-8090",
"datePublished": "2026-01-13T16:36:21.061Z",
"dateReserved": "2025-07-23T15:38:00.519Z",
"dateUpdated": "2026-01-13T21:41:51.831Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}