A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variables via unspecified vectors.
https://jvn.jp/en/jp/JVN27342829/index.html
https://blog.qt.io/blog/2017/11/22/security-advisory-qt-android/