A stack-based buffer overflow exists in the ACPI event handler of the QNX Virtual Machine. A malicious guest can send a crafted ACPI request that causes the hypervisor to overwrite memory and crash. The primary outcome is a loss of service for the virtual machine and potentially for the host if the hypervisor process terminates, though no direct data disclosure or privilege escalation is described.

The vulnerability affects BlackBerry Ltd’s QNX Hypervisor and QNX Hypervisor for Safety. No specific affected versions are listed in the current advisory.

The CVSS score of 3.3 indicates low severity, and the EPSS score of less than 1% suggests a very low likelihood of widespread exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred from the description: an attacker inside a guest VM can trigger the overflow by sending a malicious ACPI request to the hypervisor. No additional exploitation prerequisites or persistence techniques are described.