Vulnetix
Try Vulnetix Request Demo
CVE-2020-11205 PUBLISHED CVSS 7.800000190734863 HIGH

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

EPSS 0.03% · 10.1th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
10.1th percentile

Affected Products

VendorProductVersions
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon MobileQSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
qualcommsa6145p_firmware
qualcommsxr2130_firmware
qualcommqsm8350_firmware
qualcommsa6150p_firmware
qualcommsdx55m_firmware
qualcommsa6155p_firmware
qualcommsa6155_firmware
qualcommsxr2130p_firmware
qualcommsm8250_firmware
qualcommsm8350p_firmware
qualcommsm8350_firmware
qualcommsa8195p_firmware
qualcommsa8150p_firmware
qualcommsa8155p_firmware

Timeline

References

Open in Interactive Console →