CVE-2020-11305

EPSS 0.21%
Veröffentlicht 17.03.2021 06:15:14
Zuletzt bearbeitet 21.11.2024 04:57:50
Erkennungen
Login

Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 20 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8009 Firmware Version -

Qualcomm ≫ Apq8009 Version -

Qualcomm ≫ Apq8053 Firmware Version -

Qualcomm ≫ Apq8053 Version -

Qualcomm ≫ Mdm9206 Firmware Version -

Qualcomm ≫ Mdm9206 Version -

Qualcomm ≫ Pm8909 Firmware Version -

Qualcomm ≫ Pm8909 Version -

Qualcomm ≫ Pm8916 Firmware Version -

Qualcomm ≫ Pm8916 Version -

Qualcomm ≫ Pm8953 Firmware Version -

Qualcomm ≫ Pm8953 Version -

Qualcomm ≫ Pmd9607 Firmware Version -

Qualcomm ≫ Pmd9607 Version -

Qualcomm ≫ Pmi8952 Firmware Version -

Qualcomm ≫ Pmi8952 Version -

Qualcomm ≫ Qca9367 Firmware Version -

Qualcomm ≫ Qca9367 Version -

Qualcomm ≫ Qca9377 Firmware Version -

Qualcomm ≫ Qca9377 Version -

Qualcomm ≫ Smb1358 Firmware Version -

Qualcomm ≫ Smb1358 Version -

Qualcomm ≫ Smb1360 Firmware Version -

Qualcomm ≫ Smb1360 Version -

Qualcomm ≫ Smb231 Firmware Version -

Qualcomm ≫ Smb231 Version -

Qualcomm ≫ Wcd9326 Firmware Version -

Qualcomm ≫ Wcd9326 Version -

Qualcomm ≫ Wcd9330 Firmware Version -

Qualcomm ≫ Wcd9330 Version -

Qualcomm ≫ Wcn3660b Firmware Version -

Qualcomm ≫ Wcn3660b Version -

Qualcomm ≫ Wcn3680b Firmware Version -

Qualcomm ≫ Wcn3680b Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wtr2965 Firmware Version -

Qualcomm ≫ Wtr2965 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.113

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-11305

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-11305

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-11305

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-11305