5.5

CVE-2020-11122

u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8098 Firmware Version -
   Qualcomm ≫ Apq8098 Version -
Qualcomm ≫ Bitra Firmware Version -
   Qualcomm ≫ Bitra Version -
Qualcomm ≫ Kamorta Firmware Version -
   Qualcomm ≫ Kamorta Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Saipan Firmware Version -
   Qualcomm ≫ Saipan Version -
Qualcomm ≫ Sm6150 Firmware Version -
   Qualcomm ≫ Sm6150 Version -
Qualcomm ≫ Sm7150 Firmware Version -
   Qualcomm ≫ Sm7150 Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Qualcomm ≫ Sm8250 Firmware Version -
   Qualcomm ≫ Sm8250 Version -
Qualcomm ≫ Sxr2130 Firmware Version -
   Qualcomm ≫ Sxr2130 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.323
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin
Vendor Advisory