{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-40273","sourceIdentifier":"secure@blackberry.com","published":"2026-11-10T19:21:15.850","lastModified":"2026-11-10T19:21:15.850","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel"}],"affected":[{"source":"secure@blackberry.com","affectedData":[{"vendor":"BlackBerry Ltd","product":"QNX Software Development Platform (SDP)","defaultStatus":"unaffected","versions":[{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*","versionType":"cpe","status":"affected"},{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*","versionType":"cpe","status":"affected"}]},{"vendor":"BlackBerry Ltd","product":"QNX OS for Safety","defaultStatus":"unaffected","versions":[{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:*","versionType":"cpe","status":"affected"},{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:*","versionType":"cpe","status":"affected"},{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:4:*:*:*:*:*:*","versionType":"cpe","status":"affected"}]},{"vendor":"BlackBerry Ltd","product":"QNX OS for Medical","defaultStatus":"unaffected","versions":[{"version":"cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:*","versionType":"cpe","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@blackberry.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4}]},"weaknesses":[{"source":"secure@blackberry.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1287"}]}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/141342","source":"secure@blackberry.com"}]}}