CVE-2017-11076 (GCVE-0-2017-11076)

Vulnerability from cvelistv5 – Published: 2024-11-26 08:55 – Updated: 2024-11-26 14:09
VLAI?
Title
Use of Out-of-range Pointer Offset in Video
Summary
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-823 - Use of Out-of-range Pointer Offset
Assigner
References
Impacted products
Vendor Product Version
Qualcomm, Inc. Snapdragon Affected: MSM8909W
Affected: MSM8996AU
Affected: SD 210/SD 212/SD 205
Affected: SD 425
Affected: SD 427
Affected: SD 430
Affected: SD 435
Affected: SD 450
Affected: SD 615/16/SD 415
Affected: SD 625
Affected: SD 810
Affected: SD 820
Affected: SD 820A
Affected: SD 835
Affected: SD 845
Affected: SDM429
Affected: SDM439
Affected: SDM630
Affected: SDM632
Affected: SDM636
Affected: SDM660
Affected: SDM710
Affected: Snapdragon_High_Med_2016
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-11076",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-26T14:02:40.745497Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T14:09:23.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Automobile",
            "Snapdragon Mobile",
            "Snapdragon Wear"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MSM8909W"
            },
            {
              "status": "affected",
              "version": "MSM8996AU"
            },
            {
              "status": "affected",
              "version": "SD 210/SD 212/SD 205"
            },
            {
              "status": "affected",
              "version": "SD 425"
            },
            {
              "status": "affected",
              "version": "SD 427"
            },
            {
              "status": "affected",
              "version": "SD 430"
            },
            {
              "status": "affected",
              "version": "SD 435"
            },
            {
              "status": "affected",
              "version": "SD 450"
            },
            {
              "status": "affected",
              "version": "SD 615/16/SD 415"
            },
            {
              "status": "affected",
              "version": "SD 625"
            },
            {
              "status": "affected",
              "version": "SD 810"
            },
            {
              "status": "affected",
              "version": "SD 820"
            },
            {
              "status": "affected",
              "version": "SD 820A"
            },
            {
              "status": "affected",
              "version": "SD 835"
            },
            {
              "status": "affected",
              "version": "SD 845"
            },
            {
              "status": "affected",
              "version": "SDM429"
            },
            {
              "status": "affected",
              "version": "SDM439"
            },
            {
              "status": "affected",
              "version": "SDM630"
            },
            {
              "status": "affected",
              "version": "SDM632"
            },
            {
              "status": "affected",
              "version": "SDM636"
            },
            {
              "status": "affected",
              "version": "SDM660"
            },
            {
              "status": "affected",
              "version": "SDM710"
            },
            {
              "status": "affected",
              "version": "Snapdragon_High_Med_2016"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-823",
              "description": "CWE-823 Use of Out-of-range Pointer Offset",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-26T08:55:15.692Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"
        }
      ],
      "title": "Use of Out-of-range Pointer Offset in Video"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2017-11076",
    "datePublished": "2024-11-26T08:55:15.692Z",
    "dateReserved": "2017-07-07T00:00:00.000Z",
    "dateUpdated": "2024-11-26T14:09:23.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-11076\",\"sourceIdentifier\":\"product-security@qualcomm.com\",\"published\":\"2024-11-26T09:15:04.347\",\"lastModified\":\"2025-01-09T21:02:48.820\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.\"},{\"lang\":\"es\",\"value\":\"En algunas revisiones de hardware donde la decodificaci\u00f3n VP9 est\u00e1 acelerada por hardware, el tama\u00f1o del cuadro no est\u00e1 programado correctamente en el hardware del decodificador, lo que puede provocar un acceso no v\u00e1lido a la memoria por parte del decodificador.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"product-security@qualcomm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-823\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE28A59C-7AA6-4B85-84E8-07852B96108E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DEE828B-09A7-4AC1-8134-491A7C87C118\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CA1E7B0-782B-4757-B118-802943798984\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95CB08EC-AE12-4A54-AA3C-998F01FC8763\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FA80D57-3191-47CF-AD3F-9F2D64E443FE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2AFB212-F01A-4CEB-8DB4-2E0CC2308CB6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0986EF1-0974-488E-84C4-6880F876CE55\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C08BA58-2EBC-4A22-85A4-2ECD54693B9B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27110478-4C08-49E6-BD53-8BAAD9D5BD65\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3664D302-D22A-4B25-B534-3097AE2F8573\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C56BC939-2FE8-4AB4-B638-35C83B224005\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E36C12E2-7064-41E6-B357-3F0E6E6D0A0F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8175FC2D-8B9C-4461-BEAE-E9C688E8A63B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92CD09CE-75CC-418F-AB16-4685141BDE36\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE5C66CC-B00C-4581-B8FB-0632232E480D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87F57247-08CD-473E-A517-F9E85BFC7BEA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55604764-FC96-451C-BB9B-9AD72EF5D245\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71CEDACD-D22B-4CCD-93DA-B79CB74BDA22\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E07C621F-0BC0-40C1-9678-1AF6498AC487\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C621A62-E346-406B-9D20-8FF6C2B0851F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"549E6F7E-A54F-423F-BD4A-A8FB97DBD39E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"992C3835-7183-4D96-8647-DD9916880323\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7B95CCC-37F1-4768-8D64-CA2028E93E03\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1426161-4F7C-44B1-AA9E-EA661AA68947\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECF81213-DE2D-4C4B-99E8-71AFD87E92CD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95E826EF-343B-47FA-AB54-F13E868CE6A7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06E0CC35-AC20-42D7-8FEA-CA4685E33E72\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A2C4DED-2367-4736-A0AF-C8356F1271AD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95B4B4D4-0357-4E1D-9B72-635106D632CF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F992088-5E31-4625-8C3B-CE7F946C61F2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E077FC03-F86F-417A-A3E6-BC88CB85C6F0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E016356C-94ED-4CDD-8351-97D265FE036E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E08016A2-E4FE-4E9C-A915-C66BE157AFB5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"018452D0-007C-4740-B2AF-E5C8BBAC310F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CFF35A3-1472-4665-9DAB-1ABC45C0D5B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F930E9BF-C502-49C6-8BE8-9A711B89FA1B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A2D2B3B-CB28-46AA-9117-A7FA371FDE80\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE18BF66-B0DB-48BB-B43A-56F01821F5A3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DE61FCE-CA87-46E1-981D-B44697E54CB1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84289E6D-DA2A-4D04-9DDA-E8C46DDDD056\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0B56360-7AC3-410A-B7F8-1BE8514B3781\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EA0D645-80F6-48C3-AF0D-99198ADC8778\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"814FF3F3-CD5A-45A3-988C-6457D2CEB48C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A02E12AC-F845-4164-9D95-ACD7167B6DD6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"321F7DE7-E6E9-449F-867B-04A9F53334B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F00D854-0AC7-415F-B19A-642CB9F72210\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F977B432-2709-4D75-AA3E-F440285B7BA2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24D7B67C-6FEC-48F8-9D46-778E4528BC20\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05006807-D961-446C-B8DC-C87507F1316E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D045BE4B-BC19-4A51-90E6-00C18389C81B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F006960-CDE3-4E74-B4F0-2C4B2CA93959\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"706B5BF5-3803-4D3C-8A3B-34D30D8B36F9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C69745BA-DE6A-4646-959D-C45166559952\"}]}]}],\"references\":[{\"url\":\"https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html\",\"source\":\"product-security@qualcomm.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2017-11076\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-26T14:02:40.745497Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-26T14:02:43.366Z\"}}], \"cna\": {\"title\": \"Use of Out-of-range Pointer Offset in Video\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Qualcomm, Inc.\", \"product\": \"Snapdragon\", \"versions\": [{\"status\": \"affected\", \"version\": \"MSM8909W\"}, {\"status\": \"affected\", \"version\": \"MSM8996AU\"}, {\"status\": \"affected\", \"version\": \"SD 210/SD 212/SD 205\"}, {\"status\": \"affected\", \"version\": \"SD 425\"}, {\"status\": \"affected\", \"version\": \"SD 427\"}, {\"status\": \"affected\", \"version\": \"SD 430\"}, {\"status\": \"affected\", \"version\": \"SD 435\"}, {\"status\": \"affected\", \"version\": \"SD 450\"}, {\"status\": \"affected\", \"version\": \"SD 615/16/SD 415\"}, {\"status\": \"affected\", \"version\": \"SD 625\"}, {\"status\": \"affected\", \"version\": \"SD 810\"}, {\"status\": \"affected\", \"version\": \"SD 820\"}, {\"status\": \"affected\", \"version\": \"SD 820A\"}, {\"status\": \"affected\", \"version\": \"SD 835\"}, {\"status\": \"affected\", \"version\": \"SD 845\"}, {\"status\": \"affected\", \"version\": \"SDM429\"}, {\"status\": \"affected\", \"version\": \"SDM439\"}, {\"status\": \"affected\", \"version\": \"SDM630\"}, {\"status\": \"affected\", \"version\": \"SDM632\"}, {\"status\": \"affected\", \"version\": \"SDM636\"}, {\"status\": \"affected\", \"version\": \"SDM660\"}, {\"status\": \"affected\", \"version\": \"SDM710\"}, {\"status\": \"affected\", \"version\": \"Snapdragon_High_Med_2016\"}], \"platforms\": [\"Snapdragon Automobile\", \"Snapdragon Mobile\", \"Snapdragon Wear\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-823\", \"description\": \"CWE-823 Use of Out-of-range Pointer Offset\"}]}], \"providerMetadata\": {\"orgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"shortName\": \"qualcomm\", \"dateUpdated\": \"2024-11-26T08:55:15.692Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2017-11076\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-26T14:09:23.728Z\", \"dateReserved\": \"2017-07-07T00:00:00.000Z\", \"assignerOrgId\": \"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f\", \"datePublished\": \"2024-11-26T08:55:15.692Z\", \"assignerShortName\": \"qualcomm\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.