On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
Metrics
Affected Vendors & Products
References
History
Thu, 09 Jan 2025 21:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Qualcomm
Qualcomm msm8909w Qualcomm msm8909w Firmware Qualcomm msm8996au Qualcomm msm8996au Firmware Qualcomm sd 205 Qualcomm sd 205 Firmware Qualcomm sd 210 Qualcomm sd 210 Firmware Qualcomm sd 212 Qualcomm sd 212 Firmware Qualcomm sd 415 Qualcomm sd 415 Firmware Qualcomm sd 425 Qualcomm sd 425 Firmware Qualcomm sd 427 Qualcomm sd 427 Firmware Qualcomm sd 430 Qualcomm sd 430 Firmware Qualcomm sd 435 Qualcomm sd 435 Firmware Qualcomm sd 450 Qualcomm sd 450 Firmware Qualcomm sd 615 Qualcomm sd 615 Firmware Qualcomm sd 616 Qualcomm sd 616 Firmware Qualcomm sd 625 Qualcomm sd 625 Firmware Qualcomm sd 810 Qualcomm sd 810 Firmware Qualcomm sd 820 Qualcomm sd 820 Firmware Qualcomm sd 820a Qualcomm sd 820a Firmware Qualcomm sd 835 Qualcomm sd 835 Firmware Qualcomm sd 845 Qualcomm sd 845 Firmware Qualcomm sdm429 Qualcomm sdm429 Firmware Qualcomm sdm439 Qualcomm sdm439 Firmware Qualcomm sdm630 Qualcomm sdm630 Firmware Qualcomm sdm632 Qualcomm sdm632 Firmware Qualcomm sdm636 Qualcomm sdm636 Firmware Qualcomm sdm660 Qualcomm sdm660 Firmware Qualcomm sdm710 Qualcomm sdm710 Firmware Qualcomm snapdragon High Med 2016 Qualcomm snapdragon High Med 2016 Firmware |
|
Weaknesses | CWE-119 | |
CPEs | cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_810:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_810_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Qualcomm
Qualcomm msm8909w Qualcomm msm8909w Firmware Qualcomm msm8996au Qualcomm msm8996au Firmware Qualcomm sd 205 Qualcomm sd 205 Firmware Qualcomm sd 210 Qualcomm sd 210 Firmware Qualcomm sd 212 Qualcomm sd 212 Firmware Qualcomm sd 415 Qualcomm sd 415 Firmware Qualcomm sd 425 Qualcomm sd 425 Firmware Qualcomm sd 427 Qualcomm sd 427 Firmware Qualcomm sd 430 Qualcomm sd 430 Firmware Qualcomm sd 435 Qualcomm sd 435 Firmware Qualcomm sd 450 Qualcomm sd 450 Firmware Qualcomm sd 615 Qualcomm sd 615 Firmware Qualcomm sd 616 Qualcomm sd 616 Firmware Qualcomm sd 625 Qualcomm sd 625 Firmware Qualcomm sd 810 Qualcomm sd 810 Firmware Qualcomm sd 820 Qualcomm sd 820 Firmware Qualcomm sd 820a Qualcomm sd 820a Firmware Qualcomm sd 835 Qualcomm sd 835 Firmware Qualcomm sd 845 Qualcomm sd 845 Firmware Qualcomm sdm429 Qualcomm sdm429 Firmware Qualcomm sdm439 Qualcomm sdm439 Firmware Qualcomm sdm630 Qualcomm sdm630 Firmware Qualcomm sdm632 Qualcomm sdm632 Firmware Qualcomm sdm636 Qualcomm sdm636 Firmware Qualcomm sdm660 Qualcomm sdm660 Firmware Qualcomm sdm710 Qualcomm sdm710 Firmware Qualcomm snapdragon High Med 2016 Qualcomm snapdragon High Med 2016 Firmware |
Tue, 26 Nov 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 26 Nov 2024 09:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder. | |
Title | Use of Out-of-range Pointer Offset in Video | |
Weaknesses | CWE-823 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: qualcomm
Published: 2024-11-26T08:55:15.692Z
Updated: 2024-11-26T14:09:23.728Z
Reserved: 2017-07-07T00:00:00.000Z
Link: CVE-2017-11076
Vulnrichment
Updated: 2024-11-26T14:02:43.366Z
NVD
Status : Analyzed
Published: 2024-11-26T09:15:04.347
Modified: 2025-01-09T21:02:48.820
Link: CVE-2017-11076
Redhat
No data.