CVE-2017-17772: Multiple buffer overread vulnerabilities in WLAN
Published Apr 1, 2019
·Updated
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
Affected Software
15 affected components
Google Android
All of the following
Qualcomm Sd 450 Firmware
Qualcomm SD 450
All of the following
Qualcomm Sd 625 Firmware
Qualcomm SD 625
All of the following
Qualcomm Sd 820 Firmware
Qualcomm SD 820
All of the following
Qualcomm Sd 820a Firmware
Qualcomm SD 820A
All of the following
Qualcomm Sd 835 Firmware
Qualcomm SD 835
All of the following
Qualcomm Sd 845 Firmware
Qualcomm SD 845
All of the following
Qualcomm Sd 850 Firmware
Qualcomm SD 850
Event History
Apr 1, 2019
CVE Published
via Android·12:00 AM
Nov 26, 2024
CVE Published
via MITRE·08:55 AM
Data Sourced
via MITRE·08:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-17772?
CVE-2017-17772 has been classified with a high severity due to potential exploitation leading to out-of-bounds reads.
2
How do I fix CVE-2017-17772?
To fix CVE-2017-17772, update the affected devices to the latest firmware version provided by the manufacturer.
3
Which devices are affected by CVE-2017-17772?
CVE-2017-17772 affects various Qualcomm Snapdragon firmware versions across multiple devices including Android.
4
What are the potential impacts of CVE-2017-17772?
The potential impacts of CVE-2017-17772 include unauthorized access to sensitive information and system instability.
5
Is there a workaround for CVE-2017-17772?
There are no official workarounds for CVE-2017-17772; updating the firmware is the recommended action.