← Vulnerability feed

Vulnerability record · CVE-2017-17772 · published 26 November 2024

CVE-2017-17772: Qualcomm sd 450 firmware out-of-bounds read vulnerability

Qualcomm · Sd 450 Firmware

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

9.8 CVSS 3.1 Critical EPSS 0.35% · top 73.6% CWE-126 · CWE-126CWE-125 · Out-of-bounds read
9.8CVSS 3.1 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html Vendor Advisory

Track CVE-2017-17772 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-11076Qualcomm msm8909w firmware memory buffer overflow vulnerabilityOn some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can…EPSS 0.35%9.8CVE-2019-2283Qualcomm mdm9150 firmware out-of-bounds read vulnerabilityImproper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdr…EPSS 0.91%9.8CVE-2019-2258Qualcomm mdm9150 firmware out-of-bounds write vulnerabilityImproper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Co…EPSS 0.91%9.8CVE-2019-2324Qualcomm mdm9150 firmware memory buffer overflow vulnerabilityWhen ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapd…EPSS 0.91%9.8CVE-2019-2325Qualcomm mdm9150 firmware vulnerabilityOut of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compu…EPSS 0.91%9.8CVE-2019-2331Qualcomm mdm9150 firmware integer overflow vulnerabilityPossible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Com…EPSS 1.2%9.8CVE-2019-2249Qualcomm ipq8074 firmware out-of-bounds read vulnerabilityKernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Co…EPSS 1.4%9.8CVE-2019-2323Qualcomm mdm9150 firmware vulnerabilityLack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon C…EPSS 0.91%

Source: NIST National Vulnerability Database (record CVE-2017-17772), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.