CVEvulnerability

CVE-2017-11076

9.8 CRITICAL Published 2024-11-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-823

Description

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Affected configurations

• qualcomm msm8909w firmware • qualcomm msm8996au firmware • qualcomm sd 210 firmware • qualcomm sd 212 firmware • qualcomm sd 205 firmware • qualcomm sd 425 firmware • qualcomm sd 427 firmware • qualcomm sd 430 firmware • qualcomm sd 435 firmware • qualcomm sd 450 firmware • qualcomm sd 615 firmware • qualcomm sd 616 firmware • qualcomm sd 415 firmware • qualcomm sd 625 firmware • qualcomm sd 810 firmware • qualcomm sd 820 firmware • qualcomm sd 820a firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sdm429 firmware • qualcomm sdm439 firmware • qualcomm sdm630 firmware • qualcomm sdm632 firmware • qualcomm sdm636 firmware • qualcomm sdm660 firmware • qualcomm sdm710 firmware • qualcomm snapdragon high med 2016 firmware

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-823 Use of Out-of-range Pointer Offset weakness

References