← back
CVE-2025-8090

Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety

CVSS 6.2 MEDIUMEPSS 0.1%CWE-476
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.2EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch referenciado
Lifecycle
13 Jan 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H