CVEvulnerability

CVE-2020-11286

6.8 MEDIUM Published 2021-02-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

• qualcomm apq8009 • qualcomm apq8009w • qualcomm apq8017 • qualcomm apq8053 • qualcomm apq8064au • qualcomm apq8076 • qualcomm apq8096au • qualcomm ar8151 • qualcomm csr6030 • qualcomm mdm9206 • qualcomm mdm9230 • qualcomm mdm9250 • qualcomm mdm9330 • qualcomm mdm9607 • qualcomm mdm9626 • qualcomm mdm9628 • qualcomm mdm9630 • qualcomm mdm9640 • qualcomm mdm9650 • qualcomm mdm9655 • qualcomm msm8909w • qualcomm msm8937 • qualcomm msm8996au • qualcomm pm660 • qualcomm pm660a • qualcomm pm660l • qualcomm pm8004 • qualcomm pm8005 • qualcomm pm8909 • qualcomm pm8916 • qualcomm pm8937 • qualcomm pm8952 • qualcomm pm8953 • qualcomm pm8956 • qualcomm pm8996 • qualcomm pm8998 • qualcomm pmd9607 • qualcomm pmd9635 • qualcomm pmd9645 • qualcomm pmd9655 • qualcomm pmi8937 • qualcomm pmi8952 • qualcomm pmi8994 • qualcomm pmi8996 • qualcomm pmi8998 • qualcomm pmk8001 • qualcomm pmm8996au • qualcomm pmx20 • qualcomm qat3514 • qualcomm qat3522 • qualcomm qat3550 • qualcomm qbt1000 • qualcomm qbt1500 • qualcomm qca6174 • qualcomm qca6174a • qualcomm qca6310 • qualcomm qca6320 • qualcomm qca6564a • qualcomm qca6564au • qualcomm qca6574 … and 75 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References