[CVE-2026-40272] Improper Input Validation in the decode() function of the traceparser library could allow an attacke…

Descripción técnica

Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.

Puntuación CVSS

Score: 7/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-1284

Fuente oficial

Publicado en NIST NVD.