7.8
CVE-2020-11133
- EPSS 0.19%
- Veröffentlicht 08.09.2020 10:15:14
- Zuletzt bearbeitet 21.11.2024 04:56:53
- Erkennungen
Loginu'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Msm8998 Firmware Version -
Qualcomm ≫ Qcs605 Firmware Version -
Qualcomm ≫ Sda845 Firmware Version -
Qualcomm ≫ Sdm630 Firmware Version -
Qualcomm ≫ Sdm636 Firmware Version -
Qualcomm ≫ Sdm660 Firmware Version -
Qualcomm ≫ Sdm670 Firmware Version -
Qualcomm ≫ Sdm710 Firmware Version -
Qualcomm ≫ Sdm845 Firmware Version -
Qualcomm ≫ Sdm850 Firmware Version -
Qualcomm ≫ Sxr1130 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.087 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin