CVE-2017-10904

Publication date 16 December 2017

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Show unmaintained releases

Package	Ubuntu Release	Status
qt4-x11	17.10 artful	Ignored end of life
	17.04 zesty	Ignored end of life
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Ignored end of standard support
qtbase-opensource-src	17.10 artful	Ignored end of life
	17.04 zesty	Ignored end of life
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Not in release

CVSS version: CVSS v3.0

Base score 9.8 · Critical

Base metrics

Scores

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H