CVE-2025-8090

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8090
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.blackberry.com/pkb/s/article/141027
Configurations

No configuration.

History

13 Jan 2026, 19:16

Type Values Removed Values Added
Summary (en) A null pointer dereference vulnerability in the MsgRegisterEvent() system call of the QNX Neutrino Kernel in QNX SDP 7.1 and 7.0, and QNX OS for Safety 2.2, 2.1 and 2.0 could potentially allow an attacker with local access and code execution abilities, to crash the QNX Neutrino kernel. (en) Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

13 Jan 2026, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-13 17:15

Updated : 2026-01-14 16:25

NVD link : CVE-2025-8090

Mitre link : CVE-2025-8090

CVE.ORG link : CVE-2025-8090

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference