CVE-2017-17773: Buffer Overflow
In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in videofmtmp4rprocessatomavc1() causes a potential buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17773?
The severity of CVE-2017-17773 is critical, with a severity value of 9.8.
What software is affected by CVE-2017-17773?
The affected software includes Google Android, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9650 Firmware, and various Snapdragon models.
How does CVE-2017-17773 affect Snapdragon devices?
CVE-2017-17773 results in improper input validation in video handling, which could allow an attacker to execute arbitrary code on Snapdragon devices.
What is the Common Weakness Enumeration (CWE) for CVE-2017-17773?
The CWE for CVE-2017-17773 is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-20 (Improper Input Validation).
Where can I find more information about CVE-2017-17773?
You can find more information about CVE-2017-17773 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/103292), [Android Security Bulletin - March 2018](https://source.android.com/security/bulletin/2018-03-01), [Android Security Bulletin - March 2018 - CVE-2017-17773](https://source.android.com/docs/security/bulletin/2018-03-01/#asterisk).