VIR Vulnerability Intelligence Relay

CVE-2017-3893

low
Published 2017-11-14 · Modified 2026-05-13
CVSS v3
1.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v2
6.4
VIR risk
1.9

Description

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks.

Predictions

Exploit likelihood
22%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@blackberry.com — http://support.blackberry.com/kb/articleDetail?articleNumber=000046674

Application impact
VendorProductVersionsFixed
blackberryqnx_software_development_platform6.6.0

References

CWEs

CWE-693 CWE-119

Verify integrity in audit chain (admin only). AS-IS.