Environment Variable Manipulation Vulnerability in Qt for Android Applications
CVE-2017-10905

5.3MEDIUM

Key Information:

Vendor

The Qt Company

Status
Qt For Android
Vendor
CVE Published:
16 December 2017

What is CVE-2017-10905?

A vulnerability exists in Qt applications developed for the Android platform prior to version 5.9.3, allowing attackers to modify environment variables through unspecified vectors. This flaw can lead to potential exploitation, enabling malicious actors to affect application behavior or disrupt normal operations.

Affected Version(s)

Qt for Android prior to 5.9.3

References

https://jvn.jp/en/jp/JVN27342829/index.html
third-party-advisoryx_refsource_JVN
https://blog.qt.io/blog/2017/11/22/security-advisory-qt-a...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.