{"id":"CVE-2026-40274","aliases":[],"cve":{"records":[{"id":"CVE-2026-40274","source":"blackberry","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-04-10T17:41:10.441Z","published":"2026-11-10T19:03:42.088Z","modified":"2026-11-10T19:03:42.088Z"}],"publishers":[{"name":"blackberry","role":"CNA","organizationId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","modified":"2026-11-10T19:03:42.088Z"}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/141342","tags":[],"source":"blackberry"}],"weaknesses":[{"id":"CWE-822","description":"CWE-822 Untrusted pointer dereference","source":"blackberry"}],"applicability":[],"prioritization":[]},"title":"Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety","titleSource":"blackberry","descriptionSource":"blackberry","description":"Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel.","score":4,"severity":"medium","published":"2026-11-10T19:03:42.088Z","modified":"2026-11-10T19:03:42.088Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"BlackBerry Ltd","name":"QNX Software Development Platform (SDP)","platforms":[],"versions":[{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*","status":"affected","versionType":"cpe"},{"version":"cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*","status":"affected","versionType":"cpe"}],"defaultStatus":"unaffected","cpes":[],"source":"blackberry","url":"https://www.cve.org/CVERecord?id=CVE-2026-40274"},{"vendor":"BlackBerry Ltd","name":"QNX OS for Safety","platforms":[],"versions":[{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:9:*:*:*:*:*:*","status":"affected","versionType":"cpe"},{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:6:*:*:*:*:*:*","status":"affected","versionType":"cpe"},{"version":"cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:4:*:*:*:*:*:*","status":"affected","versionType":"cpe"}],"defaultStatus":"unaffected","cpes":[],"source":"blackberry","url":"https://www.cve.org/CVERecord?id=CVE-2026-40274"},{"vendor":"BlackBerry Ltd","name":"QNX OS for Medical","platforms":[],"versions":[{"version":"cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:3:*:*:*:*:*:*","status":"affected","versionType":"cpe"}],"defaultStatus":"unaffected","cpes":[],"source":"blackberry","url":"https://www.cve.org/CVERecord?id=CVE-2026-40274"}],"remediation":[],"references":["https://support.blackberry.com/pkb/s/article/141342"],"sources":[{"name":"CVE","id":"CVE-2026-40274","modified":"2026-11-10T19:03:42.088Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-40274"}],"assessments":[{"source":"blackberry","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":4}],"sourceAffected":[],"observedAt":"2026-11-10T19:26:00.614Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:10:33.488Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"The QNX Neutrino kernel in QNX Software Development Platform 7.0 and 7.1 and QNX OS for Safety 2.0 to 2.2 has an invalid pointer reference weakness, potentially allowing an attacker with local access to cause information disclosure. The vulnerability is in the TimerSettime() system call.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T12:06:06.579Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-40274"}]}}