9.8критическая
CVE-2017-11076
Описание
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
Затрагиваемое ПО
Qualcomm Msm8909w firmwareQualcomm Msm8909wQualcomm Msm8996au firmwareQualcomm Msm8996auQualcomm Sd 210 firmwareQualcomm Sd 210Qualcomm Sd 212 firmwareQualcomm Sd 212Qualcomm Sd 205 firmwareQualcomm Sd 205Qualcomm Sd 425 firmwareQualcomm Sd 425Qualcomm Sd 427 firmwareQualcomm Sd 427Qualcomm Sd 430 firmwareQualcomm Sd 430Qualcomm Sd 435 firmwareQualcomm Sd 435Qualcomm Sd 450 firmwareQualcomm Sd 450Qualcomm Sd 615 firmwareQualcomm Sd 615Qualcomm Sd 616 firmwareQualcomm Sd 616Qualcomm Sd 415 firmware
CVSS
| Балл | 9.8 — критическая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html