CVE-2017-9633 — An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf

Back Back to CVE browser

HIGH

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf

Published Aug 7, 2017

8.8

HIGH

CVSS 3.1

EPSS 2.24%

Description

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. A vulnerability in the temporary mobile subscriber identity (TMSI) may allow an attacker to access and control memory. This may allow remote code execution on the baseband radio processor of the TCU.

Affected products

Vendor n/a Product Continental AG Infineon S-Gold 2 (PMB 8876) Default
n/a
- Version
  Continental AG Infineon S-Gold 2 (PMB 8876)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Continental AG Infineon S-Gold 2 (PMB 8876)

n/a

Version	Status	Constraints
Continental AG Infineon S-Gold 2 (PMB 8876)	affected	-

Remediation

No remediation recorded yet.

Metrics

2.24% 0.02238

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02238

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.24% (0.02238)	82.20th	v5 (v2026.06.15)
Sep 20, 2026	2.24% (0.02238)	82.05th	v5 (v2026.06.15)
Jul 20, 2024	0.62% (0.00616)	78.98th	v3 (v2023.03.01)
May 28, 2024	0.62% (0.00616)	78.74th	v3 (v2023.03.01)
Mar 10, 2024	0.57% (0.00574)	77.44th	v3 (v2023.03.01)
Mar 8, 2024	0.46% (0.00460)	74.79th	v3 (v2023.03.01)
Feb 1, 2024	0.46% (0.00460)	72.79th	v3 (v2023.03.01)
Dec 23, 2023	0.54% (0.00540)	74.77th	v3 (v2023.03.01)
Nov 11, 2023	0.58% (0.00582)	75.61th	v3 (v2023.03.01)
Sep 3, 2023	0.40% (0.00401)	70.35th	v3 (v2023.03.01)
Mar 7, 2023	0.30% (0.00303)	64.87th	v3 (v2023.03.01)
Mar 6, 2023	2.07% (0.02067)	79.88th	v2 (v2022.01.01)
Feb 4, 2022	1.89% (0.01888)	54.52th	v2 (v2022.01.01)
Feb 3, 2022	1.37% (0.01374)	32.00th	v5 (v2026.06.15)
Apr 14, 2021	1.37% (0.01374)	0.00th	v1

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

http://www.securityfocus.com/bid/100132
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/100132		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 7, 2017

Updated May 6, 2025

Reserved Jun 14, 2017

Link CVE-2017-9633

CISA Vulnrichment

Updated Apr 23, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-9633

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-9633