High severity · published Jan 21, 2021
CVE-2020-11146
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Apq8076 · Qualcomm
All versions, or not specified · source: NVD
AQ
Aqt1000 · Qualcomm
All versions, or not specified · source: NVD
AR
Ar8031 · Qualcomm
All versions, or not specified · source: NVD
AR
Ar8035 · Qualcomm
All versions, or not specified · source: NVD
CS
Csra6620 · Qualcomm
All versions, or not specified · source: NVD
CS
Csra6640 · Qualcomm
All versions, or not specified · source: NVD
MS
Msm8937 · Qualcomm
All versions, or not specified · source: NVD
PM
Pm215 · Qualcomm
All versions, or not specified · source: NVD
PM
Pm3003a · Qualcomm
All versions, or not specified · source: NVD
PM
Pm4125 · Qualcomm
All versions, or not specified · source: NVD
PM
Pm456 · Qualcomm
All versions, or not specified · source: NVD
PM
Pm6125 · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11146
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
Patch
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
More from Apq8076
9.8
CVE-2020-3691
Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
9.8
CVE-2020-3686
Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto,…
9.8
CVE-2020-11213
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon…
9.8
CVE-2020-11212
Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
9.8
CVE-2020-11143
Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute,…