7.8

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qcm4290 Firmware Version -
   Qualcomm ≫ Qcm4290 Version -
Qualcomm ≫ Qcs4290 Firmware Version -
   Qualcomm ≫ Qcs4290 Version -
Qualcomm ≫ Qm215 Firmware Version -
   Qualcomm ≫ Qm215 Version -
Qualcomm ≫ Qsm8350 Firmware Version -
   Qualcomm ≫ Qsm8350 Version -
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p Version -
Qualcomm ≫ Sa6155 Firmware Version -
   Qualcomm ≫ Sa6155 Version -
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p Version -
Qualcomm ≫ Sa8155 Firmware Version -
   Qualcomm ≫ Sa8155 Version -
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p Version -
Qualcomm ≫ Sc8180x Firmware Version -
   Qualcomm ≫ Sc8180x Version -
Qualcomm ≫ Sc8180xp Firmware Version -
   Qualcomm ≫ Sc8180xp Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Qualcomm ≫ Sdx55m Firmware Version -
   Qualcomm ≫ Sdx55m Version -
Qualcomm ≫ Sm4250 Firmware Version -
   Qualcomm ≫ Sm4250 Version -
Qualcomm ≫ Sm4250p Firmware Version -
   Qualcomm ≫ Sm4250p Version -
Qualcomm ≫ Sm6115 Firmware Version -
   Qualcomm ≫ Sm6115 Version -
Qualcomm ≫ Sm6115p Firmware Version -
   Qualcomm ≫ Sm6115p Version -
Qualcomm ≫ Sm6125 Firmware Version -
   Qualcomm ≫ Sm6125 Version -
Qualcomm ≫ Sm6250 Firmware Version -
   Qualcomm ≫ Sm6250 Version -
Qualcomm ≫ Sm6350 Firmware Version -
   Qualcomm ≫ Sm6350 Version -
Qualcomm ≫ Sm7125 Firmware Version -
   Qualcomm ≫ Sm7125 Version -
Qualcomm ≫ Sm7225 Firmware Version -
   Qualcomm ≫ Sm7225 Version -
Qualcomm ≫ Sm7250 Firmware Version -
   Qualcomm ≫ Sm7250 Version -
Qualcomm ≫ Sm7250p Firmware Version -
   Qualcomm ≫ Sm7250p Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Qualcomm ≫ Sm8150p Firmware Version -
   Qualcomm ≫ Sm8150p Version -
Qualcomm ≫ Sm8250 Firmware Version -
   Qualcomm ≫ Sm8250 Version -
Qualcomm ≫ Sm8350 Firmware Version -
   Qualcomm ≫ Sm8350 Version -
Qualcomm ≫ Sm8350p Firmware Version -
   Qualcomm ≫ Sm8350p Version -
Qualcomm ≫ Sxr2130 Firmware Version -
   Qualcomm ≫ Sxr2130 Version -
Qualcomm ≫ Sxr2130p Firmware Version -
   Qualcomm ≫ Sxr2130p Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Vendor Advisory