10

CVE-2020-11153

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8053 Firmware Version -
   Qualcomm ≫ Apq8053 Version -
Qualcomm ≫ Qca6390 Firmware Version -
   Qualcomm ≫ Qca6390 Version -
Qualcomm ≫ Qca9379 Firmware Version -
   Qualcomm ≫ Qca9379 Version -
Qualcomm ≫ Qcn7605 Firmware Version -
   Qualcomm ≫ Qcn7605 Version -
Qualcomm ≫ Sc8180x Firmware Version -
   Qualcomm ≫ Sc8180x Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.28% 0.813
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin
Vendor Advisory