VDB

CVE-2020-11165

CVE-2020-11165 PUBLISHED CVSS 7.800000190734863 HIGH

Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

EPSS 0.04% · 12.9th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.04%
12.9th percentile

Affected Products

VendorProductVersions
qualcommqtc410s_firmware
qualcommpm8350bh_firmware
qualcommqcs4290_firmware
qualcommpm640p_firmware
qualcommqca9984_firmware
qualcommsd768g_firmware
qualcommqpa8686_firmware
qualcommsm7250p_firmware
qualcommpm8150l_firmware
qualcommqpa6560_firmware
qualcommqpa8801_firmware
qualcommqpm4630_firmware
qualcommqtc800h_firmware
qualcommwsa8830_firmware
qualcommpmd9655_firmware
qualcommqca6574au_firmware
qualcommsdx55_firmware
qualcommsd_8c_firmware
qualcommqbt2000_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking*

…and 236 more

Timeline

  • Jun 9, 2021 EPSS Score
  • Jun 9, 2021 CVE Published
  • Aug 10, 2021 EPSS Score
  • Oct 10, 2021 EPSS Score
  • Dec 9, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 10, 2022 EPSS Score
  • Jun 10, 2022 EPSS Score
  • Aug 11, 2022 EPSS Score
  • Oct 11, 2022 EPSS Score
  • Dec 10, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›