# CVE-2017-11076

## Summary

- **CVE ID:** CVE-2017-11076
- **Severity:** HIGH
- **CVSS Score:** 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-823
- **Published:** Nov 26, 2024
- **Last Modified:** Mar 14, 2026

## Description

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

## Affected Products

- Qualcomm, Inc. — Snapdragon (MSM8909W)
- Qualcomm, Inc. — Snapdragon (MSM8996AU)
- Qualcomm, Inc. — Snapdragon (SD 210/SD 212/SD 205)
- Qualcomm, Inc. — Snapdragon (SD 425)
- Qualcomm, Inc. — Snapdragon (SD 427)
- Qualcomm, Inc. — Snapdragon (SD 430)
- Qualcomm, Inc. — Snapdragon (SD 435)
- Qualcomm, Inc. — Snapdragon (SD 450)
- Qualcomm, Inc. — Snapdragon (SD 615/16/SD 415)
- Qualcomm, Inc. — Snapdragon (SD 625)
- Qualcomm, Inc. — Snapdragon (SD 810)
- Qualcomm, Inc. — Snapdragon (SD 820)
- Qualcomm, Inc. — Snapdragon (SD 820A)
- Qualcomm, Inc. — Snapdragon (SD 835)
- Qualcomm, Inc. — Snapdragon (SD 845)
- Qualcomm, Inc. — Snapdragon (SDM429)
- Qualcomm, Inc. — Snapdragon (SDM439)
- Qualcomm, Inc. — Snapdragon (SDM630)
- Qualcomm, Inc. — Snapdragon (SDM632)
- Qualcomm, Inc. — Snapdragon (SDM636)
- Qualcomm, Inc. — Snapdragon (SDM660)
- Qualcomm, Inc. — Snapdragon (SDM710)
- Qualcomm, Inc. — Snapdragon (Snapdragon_High_Med_2016)

## References

- [CNA](https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.21%
- **EPSS Percentile:** 43.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._