CVE-2017-10905

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.

Score

CVSS 3.0 5.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-12-16

Last modified

2024-08-05

Weaknesses

CWE-642

Affected products

• Qt (Qt)
• Qt For Android (The Qt Company)

References

• https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/
• https://jvn.jp/en/jp/JVN27342829/index.html