VIR Vulnerability Intelligence Relay

CVE-2017-3892

low
Published 2017-11-14 · Modified 2026-05-13
CVSS v3
3.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v2
5.0
VIR risk
3.8

Description

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that could be used in a blended attack by executing commands targeting procfs resources.

Predictions

Exploit likelihood
38%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@blackberry.com — http://support.blackberry.com/kb/articleDetail?articleNumber=000046674

Application impact
VendorProductVersionsFixed
blackberryqnx_software_development_platform6.6.0

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.