High severity · published Apr 7, 2021
CVE-2020-11210
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired…
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ar8035 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm4125 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm4250 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm6125 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm6150a Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm6150l Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm6350 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm7250b Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm8008 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pmd9655 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pmi632 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pmk8003 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11210
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin
More from Ar8035 Firmware
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33106
Use of Out-of-range Pointer Offset in Graphics
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2022-22071
Qualcomm Multiple Chipsets Use-After-Free Vulnerability