CVE-2025-8090

Published: Jan 13, 2026Modified: Jun 17, 2026Deferred

6.2

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: secure@blackberry.com (Secondary)

Description

Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://support.blackberry.com/pkb/s/article/141027

Source: secure@blackberry.com

Timeline

No history available yet.