CVE-2017-10905

Publication date 16 December 2017

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.

Show unmaintained releases

Package	Ubuntu Release	Status
qt4-x11	17.10 artful	Ignored end of life
	17.04 zesty	Ignored end of life
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Ignored end of standard support
qtbase-opensource-src	17.10 artful	Ignored end of life
	17.04 zesty	Ignored end of life
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Not in release

CVSS version: CVSS v3.0

Base score 5.3 · Medium

Base metrics

Scores

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L