PT-2017-16162 · Blackberry · Blackberry Qnx Software Development Platform

Published 2017-11-14 · Updated 2025-07-22 · CVE-2017-3893

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry QNX Software Development Platform (SDP) version 6.6.0

Description The default configuration of the QNX SDP system in BlackBerry QNX Software Development Platform (SDP) does not prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks in all circumstances.

Recommendations For BlackBerry QNX Software Development Platform (SDP) version 6.6.0, consider reconfiguring the system to prevent buffer overflow attacks from modifying the GOT or PLT tables until a patch is available.

Fix

Buffer Overflow

Protection Mechanism Failure

Weakness Enumeration

CWE-119

CWE-693

Related Identifiers

CVE-2017-3893

Affected Products

Blackberry Qnx Software Development Platform

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-3893 · Security Note
• http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3893 · Vendor Advisory
• https://t.me/cvenotify/129839 · Telegram Post
• https://t.me/cveNotify/129839 · Telegram Post