CVE-2017-11076

Description

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Reserved 2017-07-07 | Published 2024-11-26 | Updated 2024-11-26 | Assigner qualcomm

Problem types

CWE-823 Use of Out-of-range Pointer Offset

Product status

Default status
unaffected

MSM8909W
affected

MSM8996AU
affected

SD 210/SD 212/SD 205
affected

SD 425
affected

SD 427
affected

SD 430
affected

SD 435
affected

SD 450
affected

SD 615/16/SD 415
affected

SD 625
affected

SD 810
affected

SD 820
affected

SD 820A
affected

SD 835
affected

SD 845
affected

SDM429
affected

SDM439
affected

SDM630
affected

SDM632
affected

SDM636
affected

SDM660
affected

SDM710
affected

Snapdragon_High_Med_2016
affected

References

docs.qualcomm.com/...securitybulletin/may-2018-bulletin.html

cve.org (CVE-2017-11076)

nvd.nist.gov (CVE-2017-11076)

Download JSON