CVEvulnerability
CVE-2020-11150
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm aqt1000
• qualcomm ar8031
• qualcomm ar8035
• qualcomm csra6620
• qualcomm csra6640
• qualcomm pm215
• qualcomm pm3003a
• qualcomm pm6125
• qualcomm pm6150
• qualcomm pm6150a
• qualcomm pm6150l
• qualcomm pm6350
• qualcomm pm640a
• qualcomm pm640l
• qualcomm pm640p
• qualcomm pm660
• qualcomm pm660l
• qualcomm pm670
• qualcomm pm670a
• qualcomm pm670l
• qualcomm pm7150a
• qualcomm pm7150l
• qualcomm pm7250
• qualcomm pm7250b
• qualcomm pm7350c
• qualcomm pm8005
• qualcomm pm8008
• qualcomm pm8009
• qualcomm pm8150
• qualcomm pm8150a
• qualcomm pm8150b
• qualcomm pm8150c
• qualcomm pm8150l
• qualcomm pm8250
• qualcomm pm8350
• qualcomm pm8350b
• qualcomm pm8350bh
• qualcomm pm8350bhs
• qualcomm pm8350c
• qualcomm pm855
• qualcomm pm855b
• qualcomm pm855l
• qualcomm pm855p
• qualcomm pm8909
• qualcomm pm8916
• qualcomm pmc1000h
• qualcomm pmd9655
• qualcomm pme605
• qualcomm pmi632
• qualcomm pmk7350
• qualcomm pmk8002
• qualcomm pmk8003
• qualcomm pmk8350
• qualcomm pmm6155au
• qualcomm pmm8155au
• qualcomm pmm8195au
• qualcomm pmm855au
• qualcomm pmr525
• qualcomm pmr735a
• qualcomm pmr735b
… and 220 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link