Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2017-11076

Use of Out-of-range Pointer Offset in Video

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • MSM8909Waffected
  • MSM8996AUaffected
  • SD 210/SD 212/SD 205affected
  • SD 425affected
  • SD 427affected
  • SD 430affected
  • SD 435affected
  • SD 450affected
  • SD 615/16/SD 415affected
  • SD 625affected
  • SD 810affected
  • SD 820affected
  • SD 820Aaffected
  • SD 835affected
  • SD 845affected
  • SDM429affected
  • SDM439affected
  • SDM630affected
  • SDM632affected
  • SDM636affected
  • SDM660affected
  • SDM710affected
  • Snapdragon_High_Med_2016affected

References