CVE-2017-11076: Qualcomm MSM8909W Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Affected products

• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm Sd 205 Firmware: affected versions not specified
• Qualcomm Sd 210 Firmware: affected versions not specified
• Qualcomm Sd 212 Firmware: affected versions not specified
• Qualcomm Sd 415 Firmware: affected versions not specified
• Qualcomm Sd 425 Firmware: affected versions not specified
• Qualcomm Sd 427 Firmware: affected versions not specified
• Qualcomm Sd 430 Firmware: affected versions not specified
• Qualcomm Sd 435 Firmware: affected versions not specified
• Qualcomm Sd 450 Firmware: affected versions not specified
• Qualcomm Sd 615 Firmware: affected versions not specified
• Qualcomm Sd 616 Firmware: affected versions not specified
• Qualcomm Sd 625 Firmware: affected versions not specified
• Qualcomm Sd 810 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm Sd 820a Firmware: affected versions not specified
• Qualcomm Sd 835 Firmware: affected versions not specified
• Qualcomm Sd 845 Firmware: affected versions not specified
• Qualcomm SDM429 Firmware: affected versions not specified
• Qualcomm SDM439 Firmware: affected versions not specified
• Qualcomm SDM630 Firmware: affected versions not specified
• Qualcomm SDM632 Firmware: affected versions not specified
• Qualcomm SDM636 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• and 2 more

Published 2024-11-26. Last modified 2026-06-17.