CVE-2026-50077
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
30/100
Published: 2026-11-10
Modified: 2026-11-12
First seen: 2026-11-10
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Changed
C:
High
I:
High
A:
Low
Description
Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the QVM to cause memory corruption, information disclosure or a crash of the QVM.
Weakness Classification (1)
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| BlackBerry Ltd | QNX Hypervisor | cpe:2.3:a:blackberry:qnx_hypervisor:8.0:*:*:*:*:*:*:* |
| BlackBerry Ltd | QNX Hypervisor | cpe:2.3:a:blackberry:qnx_hypervisor:2.2:*:*:*:*:*:*:* |
| BlackBerry Ltd | QNX Hypervisor | cpe:2.3:a:blackberry:qnx_hypervisor:2.0:*:*:*:*:*:*:* |
| BlackBerry Ltd | QNX Hypervisor for Safety | cpe:2.3:a:blackberry:qnx_hypervisor_for_safety:8.0:*:*:*:*:*:*:* |
| BlackBerry Ltd | QNX Hypervisor for Safety | cpe:2.3:a:blackberry:qnx_hypervisor_for_safety:2.2:*:*:*:*:*:*:* |
| BlackBerry Ltd | QNX Hypervisor for Safety | cpe:2.3:a:blackberry:qnx_hypervisor_for_safety:2.0:*:*:*:*:*:*:* |