CVE-2026-40272 — Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform
Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary c…
Published: 2026-07-29 · CVSS: 7.0 · CVSS 3.1
Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7