CVE-2020-11181

EPSS 0.03%
Published 21.01.2021 10:15:14
Last modified 21.11.2024 04:57:07
Source product-security@qualcomm.com
Teams watchlist Login
Open Login

Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Qualcomm ≫ Pm3003a Firmware Version-

Qualcomm ≫ Pm3003a Version-

Qualcomm ≫ Pm8009 Firmware Version-

Qualcomm ≫ Pm8009 Version-

Qualcomm ≫ Pm8150a Firmware Version-

Qualcomm ≫ Pm8150a Version-

Qualcomm ≫ Pm8150b Firmware Version-

Qualcomm ≫ Pm8150b Version-

Qualcomm ≫ Pm8150c Firmware Version-

Qualcomm ≫ Pm8150c Version-

Qualcomm ≫ Pm8150l Firmware Version-

Qualcomm ≫ Pm8150l Version-

Qualcomm ≫ Pm8250 Firmware Version-

Qualcomm ≫ Pm8250 Version-

Qualcomm ≫ Pmk8002 Firmware Version-

Qualcomm ≫ Pmk8002 Version-

Qualcomm ≫ Pmr525 Firmware Version-

Qualcomm ≫ Pmr525 Version-

Qualcomm ≫ Pmx55 Firmware Version-

Qualcomm ≫ Pmx55 Version-

Qualcomm ≫ Qbt2000 Firmware Version-

Qualcomm ≫ Qbt2000 Version-

Qualcomm ≫ Qca6390 Firmware Version-

Qualcomm ≫ Qca6390 Version-

Qualcomm ≫ Qca6391 Firmware Version-

Qualcomm ≫ Qca6391 Version-

Qualcomm ≫ Qca6421 Firmware Version-

Qualcomm ≫ Qca6421 Version-

Qualcomm ≫ Qca6426 Firmware Version-

Qualcomm ≫ Qca6426 Version-

Qualcomm ≫ Qca6431 Firmware Version-

Qualcomm ≫ Qca6431 Version-

Qualcomm ≫ Qca6436 Firmware Version-

Qualcomm ≫ Qca6436 Version-

Qualcomm ≫ Qfs2530 Firmware Version-

Qualcomm ≫ Qfs2530 Version-

Qualcomm ≫ Qfs2580 Firmware Version-

Qualcomm ≫ Qfs2580 Version-

Qualcomm ≫ Qsm8250 Firmware Version-

Qualcomm ≫ Qsm8250 Version-

Qualcomm ≫ Qtc800h Firmware Version-

Qualcomm ≫ Qtc800h Version-

Qualcomm ≫ Qtc801s Firmware Version-

Qualcomm ≫ Qtc801s Version-

Qualcomm ≫ Sd865 5g Firmware Version-

Qualcomm ≫ Sd865 5g Version-

Qualcomm ≫ Sdr8250 Firmware Version-

Qualcomm ≫ Sdr8250 Version-

Qualcomm ≫ Sdr865 Firmware Version-

Qualcomm ≫ Sdr865 Version-

Qualcomm ≫ Sdx55 Firmware Version-

Qualcomm ≫ Sdx55 Version-

Qualcomm ≫ Sdx55m Firmware Version-

Qualcomm ≫ Sdx55m Version-

Qualcomm ≫ Sdxr2 5g Firmware Version-

Qualcomm ≫ Sdxr2 5g Version-

Qualcomm ≫ Smb1355 Firmware Version-

Qualcomm ≫ Smb1355 Version-

Qualcomm ≫ Smb1390 Firmware Version-

Qualcomm ≫ Smb1390 Version-

Qualcomm ≫ Smr525 Firmware Version-

Qualcomm ≫ Smr525 Version-

Qualcomm ≫ Smr526 Firmware Version-

Qualcomm ≫ Smr526 Version-

Qualcomm ≫ Wcd9380 Firmware Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Firmware Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcn6750 Firmware Version-

Qualcomm ≫ Wcn6750 Version-

Qualcomm ≫ Wcn6850 Firmware Version-

Qualcomm ≫ Wcn6850 Version-

Qualcomm ≫ Wcn6851 Firmware Version-

Qualcomm ≫ Wcn6851 Version-

Qualcomm ≫ Wsa8810 Firmware Version-

Qualcomm ≫ Wsa8810 Version-

Qualcomm ≫ Wsa8815 Firmware Version-

Qualcomm ≫ Wsa8815 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.06

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Broken Link

https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-11181

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-11181

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-11181

EUVD