CVE-2026-50077: Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety

Published Nov 10, 2026

Updated

Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the QVM to cause memory corruption, information disclosure or a crash of the QVM.

Affected Software

2 affected components

QNX QNX Hypervisor

QNX QNX Hypervisor for Safety

Event History

Nov 10, 2026

CVE Published

via MITRE·07:28 PM

Data Sourced

via MITRE·07:28 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems running QNX Hypervisor or QNX Hypervisor for Safety are affected when an attacker can operate from within a guest virtual machine.

What level of access does an attacker need?

Exploitation requires local access and low privileges in a guest, and it has high attack complexity. No user interaction is required.

What could successful exploitation affect outside the guest?

An attacker could execute arbitrary code in QVM, potentially causing QVM memory corruption, information disclosure, or a QVM crash.

CVE-2026-50077: Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

What could successful exploitation affect outside the guest?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

What could successful exploitation affect outside the guest?