CVE-2017-11076 — Use of Out-of-range Pointer Offset in Video

Description (CNA)

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected MSM8909W; affected MSM8996AU; affected SD 210/SD 212/SD 205; affected SD 425; affected SD 427; affected SD 430; affected SD 435; affected SD 450; affected SD 615/16/SD 415; affected SD 625; affected SD 810; affected SD 820; affected SD 820A; affected SD 835; affected SD 845; affected SDM429; affected SDM439; affected SDM630; affected SDM632; affected SDM636; affected SDM660; affected SDM710; affected Snapdragon_High_Med_2016

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected MSM8909W; affected MSM8996AU; affected SD 210/SD 212/SD 205; affected SD 425; affected SD 427; affected SD 430; affected SD 435; affected SD 450; affected SD 615/16/SD 415; affected SD 625; affected SD 810; affected SD 820; affected SD 820A; affected SD 835; affected SD 845; affected SDM429; affected SDM439; affected SDM630; affected SDM632; affected SDM636; affected SDM660; affected SDM710; affected Snapdragon_High_Med_2016

CWE

CWE-823

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.