CVE-2026-54437: Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Published Nov 10, 2026

Updated

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl() handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver.

Affected Software

2 affected components

QNX io-char library

QNX QNX Software Development Platform

Event History

Nov 10, 2026

CVE Published

via MITRE·06:39 PM

Data Sourced

via MITRE·06:39 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:21 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs local access. The provided vector indicates no privileges or user interaction are required.

What is the impact of successful exploitation?

Successful exploitation can cause data tampering in the Character I/O device driver's memory input buffer. The supplied impact vector indicates integrity impact without confidentiality or availability impact.

CVE-2026-54437: Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact of successful exploitation?