{"id":"CVE-2017-10905","details":"A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.","modified":"2026-07-08T10:53:44.986873Z","published":"2017-12-16T02:29:07.230Z","references":[{"type":"REPORT","url":"https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/"},{"type":"REPORT","url":"https://jvn.jp/en/jp/JVN27342829/index.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qt5","events":[{"introduced":"0"},{"fixed":"63bda0c988cad19d3a1d6906fdf3e75af1ee84b0"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"5.9.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:android:*:*"}}],"versions":["v5.9.0-beta3","v5.9.0-beta2","v5.9.0-beta1","v5.9.0-alpha1","v5.0.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10905.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qtbase","events":[{"introduced":"0"},{"fixed":"4d8ae444c2b15ec7da5ef133aa5ad5a548180e21"}],"database_specific":{"cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:android:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.9.3"}],"source":"CPE_RANGE"}}],"versions":["v5.9.0-beta3","v5.9.0-beta2","v5.9.0-beta1","v5.9.0-alpha1","v5.0.0-beta2","v5.0.0-beta1"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/qt/qtbase/commit/4d8ae444c2b15ec7da5ef133aa5ad5a548180e21","target":{"function":"startApplication","file":"src/android/jar/src/org/qtproject/qt5/android/QtActivityDelegate.java"},"deprecated":false,"digest":{"function_hash":"237826762571590649336563550389281216586","length":4561},"id":"CVE-2017-10905-14230674","signature_type":"Function","signature_version":"v1"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10905.json","vanir_signatures_modified":"2026-07-08T10:53:44Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"}]}