CVE-2017-17772
CRITICALDescription
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| qualcomm | sd_450_firmware |
| qualcomm | sd_450 |
| qualcomm | sd_625_firmware |
| qualcomm | sd_625 |
| qualcomm | sd_820_firmware |
| qualcomm | sd_820 |
| qualcomm | sd_820a_firmware |
| qualcomm | sd_820a |
| qualcomm | sd_835_firmware |
| qualcomm | sd_835 |
| qualcomm | sd_845_firmware |
| qualcomm | sd_845 |
| qualcomm | sd_850_firmware |
| qualcomm | sd_850 |
References
Frequently Asked Questions
What is CVE-2017-17772? +
How severe is CVE-2017-17772? +
What products are affected by CVE-2017-17772? +
How do I check if I'm vulnerable to CVE-2017-17772? +
Related Vulnerabilities
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet …
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, …
FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the …
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain …
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP …