Vulnerability CVE-2020-11143
Published: 2021-01-21

Description:
Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Type:

CWE-787

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Qualcomm -> Wcd9385 
Qualcomm -> Qcm2290 
Qualcomm -> Wcn3998 
Qualcomm -> Qdm2310 
Qualcomm -> Wtr1605l 
Qualcomm -> Qet4200aq 
Qualcomm -> Qfe2550 
Qualcomm -> Ar6003 
Qualcomm -> Qfe4465fc 
Qualcomm -> Mdm9310 
Qualcomm -> Qln5040 
Qualcomm -> Msm8226 
Qualcomm -> Qpa8803 
Qualcomm -> Msm8960 
Qualcomm -> Qpm5679 
Qualcomm -> Pm6350 
Qualcomm -> Qsw8574 
Qualcomm -> Pm8005 
Qualcomm -> Sa6155p 
Qualcomm -> Pm8350bhs 
Qualcomm -> Sd665 
Qualcomm -> Pm8953 
Qualcomm -> Sd850 
Qualcomm -> Pmk7350 
Qualcomm -> Sdr735 
Qualcomm -> Qat3514 
Qualcomm -> Smb1350 
Qualcomm -> Qca4020 
Qualcomm -> Smr526 
Qualcomm -> Qca6564a 
Qualcomm -> Wcn2243 
Qualcomm -> Qcm4290 
Qualcomm -> Wcn3999 
Qualcomm -> Qdm3301 
Qualcomm -> Wtr1625 
Qualcomm -> Qet5100 
Qualcomm -> Apq8009 
Qualcomm -> Qfe3100 
Qualcomm -> Ar8031 
Qualcomm -> Qfs2530 
Qualcomm -> Mdm9330 
Qualcomm -> Qpa2625 
Qualcomm -> Msm8227 
Qualcomm -> Qpa8821 
Qualcomm -> Msm8960sg 
Qualcomm -> Qpm5870 
Qualcomm -> Pm640a 
Qualcomm -> Qtc410s 
Qualcomm -> Pm8008 
Qualcomm -> Sa8150p 
Qualcomm -> Pm8350c 
Qualcomm -> Sd670 
Qualcomm -> Pm8956 
Qualcomm -> Sd855 
Qualcomm -> Pmk8001 
Qualcomm -> Sdr735g 
Qualcomm -> Qat3516 
Qualcomm -> Smb1351 
Qualcomm -> Qca6174 
Qualcomm -> Smr545 
Qualcomm -> Qca6564au 
Qualcomm -> Wcn3610 
Qualcomm -> Qcm6125 
Qualcomm -> Wcn6740 
Qualcomm -> Qdm3302 
Qualcomm -> Wtr1625l 
Qualcomm -> Qet5100m 
Qualcomm -> Apq8017 
Qualcomm -> Qfe3320 
Qualcomm -> Ar8035 
Qualcomm -> Qfs2580 
Qualcomm -> Mdm9615 
Qualcomm -> Qpa4340 
Qualcomm -> Msm8230 
Qualcomm -> Qpa8842 
Qualcomm -> Msm8962 
Qualcomm -> Qpm5875 
Qualcomm -> Pm640l 
Qualcomm -> Qtc800h 
Qualcomm -> Pm8009 
Qualcomm -> Sa8155 
Qualcomm -> Pm855 
Qualcomm -> Sd675 
Qualcomm -> Pm8996 
Qualcomm -> Sd8655g 
Qualcomm -> Pmk8002 
Qualcomm -> Sdr8150 
Qualcomm -> Qat3518 
Qualcomm -> Smb1354 
Qualcomm -> Qca6174a 
Qualcomm -> Smr546 
Qualcomm -> Qca6574 
Qualcomm -> Wcn3615 
Qualcomm -> Qcs2290 
Qualcomm -> Wcn6750 
Qualcomm -> Qdm4643 
Qualcomm -> Wtr2100 
Qualcomm -> Qet6100 
Qualcomm -> Apq8030 
Qualcomm -> Qfe3335 

 References:
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
Copyright 2024, cxsecurity.com

 

Back to Top