CVEvulnerability

CVE-2020-11198

6.7 MEDIUM Published 2021-02-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-212

Description

Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected configurations

• qualcomm aqt1000 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm csr8811 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm csrb31024 firmware • qualcomm fsm10055 firmware • qualcomm fsm10056 firmware • qualcomm ipq6000 firmware • qualcomm ipq6005 firmware • qualcomm ipq6010 firmware • qualcomm ipq6018 firmware • qualcomm ipq6028 firmware • qualcomm pm3003a firmware • qualcomm pm4125 firmware • qualcomm pm4250 firmware • qualcomm pm456 firmware • qualcomm pm6125 firmware • qualcomm pm6150 firmware • qualcomm pm6150a firmware • qualcomm pm6150l firmware • qualcomm pm6250 firmware • qualcomm pm6350 firmware • qualcomm pm640a firmware • qualcomm pm640l firmware • qualcomm pm640p firmware • qualcomm pm660 firmware • qualcomm pm660l firmware • qualcomm pm670 firmware • qualcomm pm670a firmware • qualcomm pm670l firmware • qualcomm pm7150a firmware • qualcomm pm7150l firmware • qualcomm pm7250 firmware • qualcomm pm7250b firmware • qualcomm pm8004 firmware • qualcomm pm8005 firmware • qualcomm pm8008 firmware • qualcomm pm8009 firmware • qualcomm pm8150 firmware • qualcomm pm8150a firmware • qualcomm pm8150b firmware • qualcomm pm8150c firmware • qualcomm pm8150l firmware • qualcomm pm8250 firmware • qualcomm pm855 firmware • qualcomm pm855a firmware • qualcomm pm855b firmware • qualcomm pm855l firmware • qualcomm pm855p firmware • qualcomm pm8998 firmware • qualcomm pmc1000h firmware • qualcomm pmd9655 firmware • qualcomm pme605 firmware • qualcomm pmi632 firmware • qualcomm pmi8998 firmware • qualcomm pmk8002 firmware • qualcomm pmk8003 firmware • qualcomm pmm6155au firmware … and 241 more

Related

Weakness · CWE (1)

  • CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness

References