CVE-2017-11076

Katalog CVE

CVSS 9.8 · Critical EPSS 0,35%

Kerentanan Use of Out-of-range Pointer Offset pada qualcomm msm8909w firmware, qualcomm msm8996au firmware +25 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut qualcomm.com.

Deskripsi (NVD)

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Rincian

Terbit di NVD

26 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber qualcomm.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-823: Use of Out-of-range Pointer Offset
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html advisory vendor