CVEvulnerability

CVE-2020-11205

7.8 HIGH Published 2020-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190, CWE-787

Description

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Affected configurations

• qualcomm qsm8350 firmware • qualcomm sa6145p firmware • qualcomm sa6150p firmware • qualcomm sa6155 firmware • qualcomm sa6155p firmware • qualcomm sa8150p firmware • qualcomm sa8155p firmware • qualcomm sa8195p firmware • qualcomm sdx55m firmware • qualcomm sm8250 firmware • qualcomm sm8350 firmware • qualcomm sm8350p firmware • qualcomm sxr2130 firmware • qualcomm sxr2130p firmware

Related

Weakness · CWE (2)

  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-787 Out-of-bounds Write weakness

References