[CVE-2026-4017] Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with lo…

Descripción técnica

Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Puntuación CVSS

Score: 7.4/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-121

Fuente oficial

Publicado en NIST NVD.