CVE-2017-11076 HIGH

CVE-2017-11076: Use of Out-of-range Pointer Offset in Video

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-823
Published November 26, 2024
Last update November 26, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Key dates

02Disclosure timeline

November 26, 2024 CVE published
November 26, 2024 Record updated