Back
CVE-2025-8090Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety
- 6.2MediumCVSS base score
- 0.14%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
Timeline
ID reserved
By blackberry
- 6 months later
· 6 months later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| blackberryCNA (assigner) | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Deferred | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.14% · top 97% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.
Affected products
BlackBerry Ltd · QNX Software Development Platform
- affected 7.1 and 7.0
- affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*
- affected cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*
BlackBerry Ltd · QNX OS for Safety
- affected 2.2.7 and earlier
- affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*
- affected 2.1.4 and earlier
- affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*
- affected 2.0.2 and earlier
- affected cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:*
BlackBerry Ltd. · QNX OS for Medical
- affected 2.0.1 and earlier
- affected cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:*
References
References1
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-2075 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-8090)Record last updated .