CVE-2020-11128

EPSS 0.2%
Veröffentlicht 08.09.2020 10:15:14
Zuletzt bearbeitet 21.11.2024 04:56:53
Erkennungen
Login

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8009 Firmware Version -

Qualcomm ≫ Apq8009 Version -

Qualcomm ≫ Apq8096au Firmware Version -

Qualcomm ≫ Apq8096au Version -

Qualcomm ≫ Apq8098 Firmware Version -

Qualcomm ≫ Apq8098 Version -

Qualcomm ≫ Bitra Firmware Version -

Qualcomm ≫ Bitra Version -

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Msm8917 Firmware Version -

Qualcomm ≫ Msm8917 Version -

Qualcomm ≫ Msm8920 Firmware Version -

Qualcomm ≫ Msm8920 Version -

Qualcomm ≫ Msm8937 Firmware Version -

Qualcomm ≫ Msm8937 Version -

Qualcomm ≫ Msm8940 Firmware Version -

Qualcomm ≫ Msm8940 Version -

Qualcomm ≫ Msm8953 Firmware Version -

Qualcomm ≫ Msm8953 Version -

Qualcomm ≫ Msm8998 Firmware Version -

Qualcomm ≫ Msm8998 Version -

Qualcomm ≫ Qcm2150 Firmware Version -

Qualcomm ≫ Qcm2150 Version -

Qualcomm ≫ Qcs405 Firmware Version -

Qualcomm ≫ Qcs405 Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qcs610 Firmware Version -

Qualcomm ≫ Qcs610 Version -

Qualcomm ≫ Qm215 Firmware Version -

Qualcomm ≫ Qm215 Version -

Qualcomm ≫ Rennell Firmware Version -

Qualcomm ≫ Rennell Version -

Qualcomm ≫ Sa515m Firmware Version -

Qualcomm ≫ Sa515m Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Saipan Firmware Version -

Qualcomm ≫ Saipan Version -

Qualcomm ≫ Sc8180x Firmware Version -

Qualcomm ≫ Sc8180x Version -

Qualcomm ≫ Sdm429 Firmware Version -

Qualcomm ≫ Sdm429 Version -

Qualcomm ≫ Sdm429w Firmware Version -

Qualcomm ≫ Sdm429w Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm450 Firmware Version -

Qualcomm ≫ Sdm450 Version -

Qualcomm ≫ Sdm632 Firmware Version -

Qualcomm ≫ Sdm632 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sdm670 Firmware Version -

Qualcomm ≫ Sdm670 Version -

Qualcomm ≫ Sdm710 Firmware Version -

Qualcomm ≫ Sdm710 Version -

Qualcomm ≫ Sdm845 Firmware Version -

Qualcomm ≫ Sdm845 Version -

Qualcomm ≫ Sdx24 Firmware Version -

Qualcomm ≫ Sdx24 Version -

Qualcomm ≫ Sdx55 Firmware Version -

Qualcomm ≫ Sdx55 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sm8250 Firmware Version -

Qualcomm ≫ Sm8250 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Qualcomm ≫ Mdm9150 Firmware Version -

Qualcomm ≫ Mdm9150 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.102

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin

Vendor Advisory

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2020-11128

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-11128

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-11128

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-11128