{"id":"CVE-2025-8090","aliases":["EUVD-2026-2075","GHSA-j5j7-j8wm-qv7r"],"status":"published","title":"Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety","description":"Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00136,"percentile":0.03051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2026-01-13T16:36:21Z","modified":"2026-06-17T10:06:17Z","products":[{"vendor":"blackberry ltd","product":"qnx os for safety"},{"vendor":"blackberry ltd","product":"qnx software development platform"},{"vendor":"blackberry ltd.","product":"qnx os for medical"}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/141027","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8090"},{"url":"https://github.com/advisories/GHSA-j5j7-j8wm-qv7r"}],"sources":{"cve":[{"id":"CVE-2025-8090","title":"Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety","description":"Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.","status":"published","published":"2026-01-13T16:36:21.061Z","modified":"2026-01-13T21:41:51.831Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:32:38.351095Z"}],"euvd":[{"id":"EUVD-2026-2075","description":"Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.","status":"published","published":"2026-01-13T16:36:21Z","modified":"2026-01-13T21:41:51Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:52.227329Z"}],"ghsa":[{"id":"GHSA-j5j7-j8wm-qv7r","title":"A null pointer dereference vulnerability in the MsgRegisterEvent() system call of the QNX...","description":"A null pointer dereference vulnerability in the MsgRegisterEvent() system call of the QNX Neutrino Kernel in QNX SDP 7.1 and 7.0, and QNX OS for Safety 2.2, 2.1 and 2.0 could potentially allow an attacker with local access and code execution abilities, to crash the QNX Neutrino kernel.","status":"published","published":"2026-01-13T18:31:08Z","modified":"2026-01-13T18:31:14Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:05:34.558577Z"}],"nvd":[{"id":"CVE-2025-8090","description":"Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.","status":"published","published":"2026-01-13T17:15:59.32Z","modified":"2026-06-17T10:06:17.48Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:11:56.616231Z"}]}}