VULNERABILITY INTELLIGENCE
CVE-2017-3893
CVSS score1.9 LOW
EPSS probability0.50%
CISA KEVNot currently listed
Published2017-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Description
In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-693: Protection Mechanism Failure
Primary references
- secure@blackberry.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory