Answer in brief
CVE-2026-4017 records a High severity (CVSS 7.4) vulnerability in Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety. The current sources do not mark it as known exploited. The current feed maps BlackBerry Ltd./QNX OS for Medical (generic), BlackBerry Ltd/QNX OS for Safety (generic), BlackBerry Ltd/QNX Software Development Platform (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.4. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps BlackBerry Ltd./QNX OS for Medical (generic), BlackBerry Ltd/QNX OS for Safety (generic), BlackBerry Ltd/QNX Software Development Platform (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| BlackBerry Ltd./QNX OS for Medicalgeneric | 2.0.2 and earlier || cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:* | Not reported |
| BlackBerry Ltd/QNX OS for Safetygeneric | 2.2.8 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:* || 2.1.5 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:* || 2.0.3 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:* | Not reported |
| BlackBerry Ltd/QNX Software Development Platformgeneric | 7.1 || cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* || 7.0 || cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* | Not reported |
Published upstream
Jul 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Jul 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 15, 2026
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-4017 records a High severity (CVSS 7.4) vulnerability in Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety. The current sources do not mark it as known exploited. The current feed maps BlackBerry Ltd./QNX OS for Medical (generic), BlackBerry Ltd/QNX OS for Safety (generic), BlackBerry Ltd/QNX Software Development Platform (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.4. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps BlackBerry Ltd./QNX OS for Medical (generic), BlackBerry Ltd/QNX OS for Safety (generic), BlackBerry Ltd/QNX Software Development Platform (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| BlackBerry Ltd./QNX OS for Medicalgeneric | 2.0.2 and earlier || cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:* | Not reported |
| BlackBerry Ltd/QNX OS for Safetygeneric | 2.2.8 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:* || 2.1.5 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:* || 2.0.3 and earlier || cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:* | Not reported |
| BlackBerry Ltd/QNX Software Development Platformgeneric | 7.1 || cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:* || 7.0 || cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* | Not reported |
Published upstream
Jul 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Jul 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 15, 2026
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
Quoted source text, attributed separately from HOL analysis.