CVE-2026-50080: Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety
Published Nov 10, 2026
·Updated
Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request.
Affected Software
2 affected components
QNX QNX Hypervisor
QNX QNX Hypervisor for Safety
Event History
Nov 10, 2026
CVE Published
via MITRE·07:17 PM
Data Sourced
via MITRE·07:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must already have low-privileged access within a guest environment and be able to send a crafted ACPI request. No user interaction is required.
2
What is the expected impact on the host or other guests?
The reported impact is a crash of the QVM, resulting in low availability impact. The supplied metrics indicate no confidentiality or integrity impact and an unchanged security scope.