What is the severity of CVE-2017-17773?

The severity of CVE-2017-17773 is critical, with a severity value of 9.8.

What software is affected by CVE-2017-17773?

The affected software includes Google Android, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9650 Firmware, and various Snapdragon models.

How does CVE-2017-17773 affect Snapdragon devices?

CVE-2017-17773 results in improper input validation in video handling, which could allow an attacker to execute arbitrary code on Snapdragon devices.

What is the Common Weakness Enumeration (CWE) for CVE-2017-17773?

The CWE for CVE-2017-17773 is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-20 (Improper Input Validation).

Where can I find more information about CVE-2017-17773?

You can find more information about CVE-2017-17773 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/103292), [Android Security Bulletin - March 2018](https://source.android.com/security/bulletin/2018-03-01), [Android Security Bulletin - March 2018 - CVE-2017-17773](https://source.android.com/docs/security/bulletin/2018-03-01/#asterisk).

Vulnerability/
CVE-2017-17773

critical

CWE

119 20

5/3/2018

26/8/2024

CVE-2017-17773: Buffer Overflow

First published: Mon Mar 05 2018(Updated: )

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in video_fmt_mp4r_process_atom_avc1() causes a potential buffer overflow.

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
Qualcomm Sd 210 Firmware
Qualcomm Sd 210
Qualcomm Sd 212 Firmware
Qualcomm Sd 212
Qualcomm Sd 412 Firmware
Qualcomm Sd 412
Qualcomm Sd 410 Firmware
Qualcomm Sd 410
Qualcomm Sd 425 Firmware
Qualcomm Sd 425
Qualcomm Sd 430 Firmware
Qualcomm Sd 430
Qualcomm Sd 616 Firmware
Qualcomm Sd 616
Qualcomm Sd 615 Firmware
Qualcomm Sd 615
Qualcomm Sd 415 Firmware
Qualcomm Sd 415
Qualcomm Sd 617 Firmware
Qualcomm Sd 617
Qualcomm Sd 625 Firmware
Qualcomm Sd 625
Qualcomm Sd 650 Firmware
Qualcomm Sd 650
Qualcomm Sd 652 Firmware
Qualcomm Sd 652
Qualcomm Sd 820 Firmware
Qualcomm Sd 820
Qualcomm S820am Firmware
Qualcomm S820am
Qualcomm Sd 835 Firmware
Qualcomm Sd 835
Qualcomm Sd 845 Firmware
Qualcomm Sd 845
Qualcomm Sd 205 Firmware
Qualcomm Sd 205
Qualcomm Sd 400 Firmware
Qualcomm Sd 400
Qualcomm Sd 450 Firmware
Qualcomm Sd 450
Qualcomm Sd 600 Firmware
Qualcomm Sd 600
Qualcomm Sd 602a Firmware
Qualcomm Sd 602a
Qualcomm Sd 800 Firmware
Qualcomm Sd 800
Qualcomm Sd 808 Firmware
Qualcomm Sd 808
Qualcomm Sd 810 Firmware
Qualcomm Sd 810
Qualcomm Msm8909w Firmware
Qualcomm Msm8909w

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-17773?
The severity of CVE-2017-17773 is critical, with a severity value of 9.8.
What software is affected by CVE-2017-17773?
The affected software includes Google Android, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9650 Firmware, and various Snapdragon models.
How does CVE-2017-17773 affect Snapdragon devices?
CVE-2017-17773 results in improper input validation in video handling, which could allow an attacker to execute arbitrary code on Snapdragon devices.
What is the Common Weakness Enumeration (CWE) for CVE-2017-17773?
The CWE for CVE-2017-17773 is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-20 (Improper Input Validation).
Where can I find more information about CVE-2017-17773?
You can find more information about CVE-2017-17773 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/103292), [Android Security Bulletin - March 2018](https://source.android.com/security/bulletin/2018-03-01), [Android Security Bulletin - March 2018 - CVE-2017-17773](https://source.android.com/docs/security/bulletin/2018-03-01/#asterisk).