CVE-2026-50078: Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety

Published Nov 10, 2026

Updated

Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information disclosure or a crash of the QVM.

Affected Software

2 affected components

QNX QNX Hypervisor

QNX QNX Hypervisor for Safety

Event History

Nov 10, 2026

CVE Published

via MITRE·07:27 PM

Data Sourced

via MITRE·07:27 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs access within a guest virtual machine. The issue is locally exploitable with low privileges and does not require user interaction.

What impact should operators expect?

Successful exploitation may disclose information or crash the QNX Virtual Machine process. The provided severity vector indicates low confidentiality and availability impact, with no integrity impact.

Which deployments are affected?

The issue affects QNX Hypervisor and QNX Hypervisor for Safety deployments that use QVM. The supplied data does not identify affected versions, fixed versions, or configuration-specific limitations.

CVE-2026-50078: Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact should operators expect?

Which deployments are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact should operators expect?

Which deployments are affected?