VIR Vulnerability Intelligence Relay

CVE-2017-9369

low
Published 2017-11-14 · Modified 2026-05-13
CVSS v3
3.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v2
4.0
VIR risk
3.8

Description

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader.

Predictions

Exploit likelihood
38%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@blackberry.com — http://support.blackberry.com/kb/articleDetail?articleNumber=000046674

Application impact
VendorProductVersionsFixed
blackberryqnx_software_development_platform6.5.0
blackberryqnx_software_development_platform6.6.0

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.