CVEvulnerability

CVE-2020-11293

6.0 MEDIUM Published 2021-05-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-125

Description

Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected configurations

• qualcomm apq8017 firmware • qualcomm apq8037 firmware • qualcomm apq8053 firmware • qualcomm apq8064au firmware • qualcomm apq8096au firmware • qualcomm aqt1000 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm ar8151 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm csrb31024 firmware • qualcomm fsm10055 firmware • qualcomm fsm10056 firmware • qualcomm mdm9205 firmware • qualcomm mdm9640 firmware • qualcomm mdm9650 firmware • qualcomm mdm9655 firmware • qualcomm msm8917 firmware • qualcomm msm8920 firmware • qualcomm msm8937 firmware • qualcomm msm8940 firmware • qualcomm msm8953 firmware • qualcomm msm8996au firmware • qualcomm pm215 firmware • qualcomm pm3003a firmware • qualcomm pm4125 firmware • qualcomm pm4250 firmware • qualcomm pm439 firmware • qualcomm pm456 firmware • qualcomm pm6125 firmware • qualcomm pm6150 firmware • qualcomm pm6150a firmware • qualcomm pm6150l firmware • qualcomm pm6250 firmware • qualcomm pm6350 firmware • qualcomm pm640a firmware • qualcomm pm640l firmware • qualcomm pm640p firmware • qualcomm pm660 firmware • qualcomm pm660a firmware • qualcomm pm660l firmware • qualcomm pm670 firmware • qualcomm pm670a firmware • qualcomm pm670l firmware • qualcomm pm7250b firmware • qualcomm pm8004 firmware • qualcomm pm8005 firmware • qualcomm pm8008 firmware • qualcomm pm8009 firmware • qualcomm pm8019 firmware • qualcomm pm8150 firmware • qualcomm pm8150a firmware • qualcomm pm8150b firmware • qualcomm pm8150c firmware • qualcomm pm8150l firmware • qualcomm pm8250 firmware • qualcomm pm8350 firmware • qualcomm pm855 firmware • qualcomm pm855a firmware … and 279 more

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References