CVE-2026-40272

Name of the Vulnerable Software and Affected Versions BlackBerry QNX (affected versions not specified)

Description Improper input validation in the decode() function of the traceparser library allows an attacker to use a corrupted kernel trace event log (.kev) file to execute arbitrary code or cause a crash in processes using libtraceparser on QNX hosts or targets. This issue is caused by an out-of-bounds write during KEV file parsing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.