7.5

CVE-2020-11268

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009 Version-
Qualcomm ≫ Apq8016 Version-
Qualcomm ≫ Apq8074 Version-
Qualcomm ≫ Apq8084 Version-
Qualcomm ≫ Apq8094 Version-
Qualcomm ≫ Ar6003 Version-
Qualcomm ≫ Mdm8215 Version-
Qualcomm ≫ Mdm8215m Version-
Qualcomm ≫ Mdm8615m Version-
Qualcomm ≫ Mdm9215 Version-
Qualcomm ≫ Mdm9235m Version-
Qualcomm ≫ Mdm9310 Version-
Qualcomm ≫ Mdm9609 Version-
Qualcomm ≫ Mdm9615 Version-
Qualcomm ≫ Mdm9615m Version-
Qualcomm ≫ Mdm9635m Version-
Qualcomm ≫ Mdm9640 Version-
Qualcomm ≫ Mdm9645 Version-
Qualcomm ≫ Msm8108 Version-
Qualcomm ≫ Msm8208 Version-
Qualcomm ≫ Msm8209 Version-
Qualcomm ≫ Msm8216 Version-
Qualcomm ≫ Msm8274 Version-
Qualcomm ≫ Msm8608 Version-
Qualcomm ≫ Msm8674 Version-
Qualcomm ≫ Msm8916 Version-
Qualcomm ≫ Msm8929 Version-
Qualcomm ≫ Msm8939 Version-
Qualcomm ≫ Msm8974 Version-
Qualcomm ≫ Msm8974p Version-
Qualcomm ≫ Msm8994 Version-
Qualcomm ≫ Pm8018 Version-
Qualcomm ≫ Pm8841 Version-
Qualcomm ≫ Pm8909 Version-
Qualcomm ≫ Pm8916 Version-
Qualcomm ≫ Pm8941 Version-
Qualcomm ≫ Pm8994 Version-
Qualcomm ≫ Pmd9635 Version-
Qualcomm ≫ Pmd9645 Version-
Qualcomm ≫ Pmi8994 Version-
Qualcomm ≫ Qca1990 Version-
Qualcomm ≫ Qca6174 Version-
Qualcomm ≫ Qca6174a Version-
Qualcomm ≫ Qca6584 Version-
Qualcomm ≫ Qfe1035 Version-
Qualcomm ≫ Qfe1040 Version-
Qualcomm ≫ Qfe1045 Version-
Qualcomm ≫ Qfe1100 Version-
Qualcomm ≫ Qfe1101 Version-
Qualcomm ≫ Qfe1520 Version-
Qualcomm ≫ Qfe1550 Version-
Qualcomm ≫ Qfe2101 Version-
Qualcomm ≫ Qfe2310 Version-
Qualcomm ≫ Qfe2320 Version-
Qualcomm ≫ Qfe2330 Version-
Qualcomm ≫ Qfe2340 Version-
Qualcomm ≫ Qfe2520 Version-
Qualcomm ≫ Qfe2550 Version-
Qualcomm ≫ Qfe2720 Version-
Qualcomm ≫ Qfe3100 Version-
Qualcomm ≫ Qfe3320 Version-
Qualcomm ≫ Qfe3335 Version-
Qualcomm ≫ Qfe3340 Version-
Qualcomm ≫ Qfe3345 Version-
Qualcomm ≫ Sd210 Version-
Qualcomm ≫ Smb1360 Version-
Qualcomm ≫ Wcd9306 Version-
Qualcomm ≫ Wcd9330 Version-
Qualcomm ≫ Wcn3610 Version-
Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660 Version-
Qualcomm ≫ Wcn3660a Version-
Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wcn3680 Version-
Qualcomm ≫ Wcn3680b Version-
Qualcomm ≫ Wfr1620 Version-
Qualcomm ≫ Wgr7640 Version-
Qualcomm ≫ Wtr1605 Version-
Qualcomm ≫ Wtr1605l Version-
Qualcomm ≫ Wtr1625 Version-
Qualcomm ≫ Wtr1625l Version-
Qualcomm ≫ Wtr2605 Version-
Qualcomm ≫ Wtr2955 Version-
Qualcomm ≫ Wtr3925 Version-
Qualcomm ≫ Wtr4605 Version-
Qualcomm ≫ Wtr4905 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.466
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
product-security@qualcomm.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.