« Volver al listado

CVE-2025-8090

Estado: AplazadaMedia (6.2)—

Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

QNX — NeutrinoAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-8090",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-8090",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-13T21:41:44.974623Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@blackberry.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "secure@blackberry.com",
      "affectedData": [
        {
          "vendor": "BlackBerry Ltd",
          "product": "QNX Software Development Platform",
          "versions": [
            {
              "status": "affected",
              "version": "7.1 and 7.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*",
              "versionType": "cpe"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*",
              "versionType": "cpe"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "BlackBerry Ltd",
          "product": "QNX OS for Safety",
          "versions": [
            {
              "status": "affected",
              "version": "2.2.7 and earlier",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:7:*:*:*:*:*:*",
              "versionType": "cpe"
            },
            {
              "status": "affected",
              "version": "2.1.4 and earlier",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:4:*:*:*:*:*:*",
              "versionType": "cpe"
            },
            {
              "status": "affected",
              "version": "2.0.2 and earlier",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:2:*:*:*:*:*:*",
              "versionType": "cpe"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "BlackBerry Ltd.",
          "product": "QNX OS for Medical",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.1 and earlier",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:1:*:*:*:*:*:*",
              "versionType": "cpe"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-01-13T17:15:59.320",
  "references": [
    {
      "url": "https://support.blackberry.com/pkb/s/article/141027",
      "source": "secure@blackberry.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@blackberry.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel."
    },
    {
      "lang": "es",
      "value": "Desreferencia de puntero nulo en la llamada al sistema MsgRegisterEvent() podría permitir a un atacante con acceso local y capacidades de ejecución de código bloquear el kernel QNX Neutrino."
    }
  ],
  "lastModified": "2026-06-17T10:06:17.480",
  "sourceIdentifier": "secure@blackberry.com"
}