CVE-2017-11076
Use of Out-of-range Pointer Offset in Video
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Use of Out-of-range Pointer Offset in Video
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
- Record
CVE-2017-11076- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-823
- Updated
- 2026-11-02
EUVDEUVD-2017-2713
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
- Record
EUVD-2017-2713- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3chv-hrqx-p726
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not...
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
- Record
GHSA-3chv-hrqx-p726- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-823
- Updated
- 2026-11-02
NVD
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
- Record
CVE-2017-11076- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-823, CWE-119
- Updated
- 2026-11-02
Affected products
- qualcomm msm8909w firmware
- qualcomm msm8996au firmware
- qualcomm sd 205 firmware
- qualcomm sd 210 firmware
- qualcomm sd 212 firmware
- qualcomm sd 415 firmware
- qualcomm sd 425 firmware
- qualcomm sd 427 firmware
- qualcomm sd 430 firmware
- qualcomm sd 435 firmware
- qualcomm sd 450 firmware
- qualcomm sd 615 firmware
Show 16 moreShow less
- qualcomm sd 616 firmware
- qualcomm sd 625 firmware
- qualcomm sd 810 firmware
- qualcomm sd 820 firmware
- qualcomm sd 820a firmware
- qualcomm sd 835 firmware
- qualcomm sd 845 firmware
- qualcomm sdm429 firmware
- qualcomm sdm439 firmware
- qualcomm sdm630 firmware
- qualcomm sdm632 firmware
- qualcomm sdm636 firmware
- qualcomm sdm660 firmware
- qualcomm sdm710 firmware
- qualcomm snapdragon high med 2016 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-11076 is a high vulnerability (CVSS 8.8) in Qualcomm Msm8909w Firmware, published November 26, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.