CVE Feed

    Dashboard / CVE / CVE-2020-11242

    CVE-2020-11242

    User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

    Published:Apr 7, 2021
    Last Modified:Nov 21, 2024
    EPS:Apr 7, 2021
    EPSS Score:0.00033
    CVSS Score:8.4

    Affected Products

    Vendor
    Qualcomm
    Product
    Pm660
    Vendor
    Qualcomm
    Product
    Pm660 Firmware
    Vendor
    Qualcomm
    Product
    Pm660a
    Vendor
    Qualcomm
    Product
    Pm660a Firmware
    Vendor
    Qualcomm
    Product
    Pm660l
    Vendor
    Qualcomm
    Product
    Pm660l Firmware
    Vendor
    Qualcomm
    Product
    Pm855a
    Vendor
    Qualcomm
    Product
    Pm855a Firmware
    Vendor
    Qualcomm
    Product
    Pmm855au
    Vendor
    Qualcomm
    Product
    Pmm855au Firmware
    Vendor
    Qualcomm
    Product
    Qat3514
    Vendor
    Qualcomm
    Product
    Qat3514 Firmware
    Vendor
    Qualcomm
    Product
    Qat3522
    Vendor
    Qualcomm
    Product
    Qat3522 Firmware
    Vendor
    Qualcomm
    Product
    Qat3550
    Vendor
    Qualcomm
    Product
    Qat3550 Firmware
    Vendor
    Qualcomm
    Product
    Qca6564a
    Vendor
    Qualcomm
    Product
    Qca6564a Firmware
    Vendor
    Qualcomm
    Product
    Qca6564au
    Vendor
    Qualcomm
    Product
    Qca6564au Firmware
    Vendor
    Qualcomm
    Product
    Qca6574a
    Vendor
    Qualcomm
    Product
    Qca6574a Firmware
    Vendor
    Qualcomm
    Product
    Qca6574au
    Vendor
    Qualcomm
    Product
    Qca6574au Firmware
    Vendor
    Qualcomm
    Product
    Qca6595
    Vendor
    Qualcomm
    Product
    Qca6595 Firmware
    Vendor
    Qualcomm
    Product
    Qca6595au
    Vendor
    Qualcomm
    Product
    Qca6595au Firmware
    Vendor
    Qualcomm
    Product
    Qet4100
    Vendor
    Qualcomm
    Product
    Qet4100 Firmware
    Vendor
    Qualcomm
    Product
    Qet4101
    Vendor
    Qualcomm
    Product
    Qet4101 Firmware
    Vendor
    Qualcomm
    Product
    Qet4200aq
    Vendor
    Qualcomm
    Product
    Qet4200aq Firmware
    Vendor
    Qualcomm
    Product
    Qln1021aq
    Vendor
    Qualcomm
    Product
    Qln1021aq Firmware
    Vendor
    Qualcomm
    Product
    Qln1031
    Vendor
    Qualcomm
    Product
    Qln1031 Firmware
    Vendor
    Qualcomm
    Product
    Qln1036aq
    Vendor
    Qualcomm
    Product
    Qln1036aq Firmware
    Vendor
    Qualcomm
    Product
    Qpa4340
    Vendor
    Qualcomm
    Product
    Qpa4340 Firmware
    Vendor
    Qualcomm
    Product
    Qpa4360
    Vendor
    Qualcomm
    Product
    Qpa4360 Firmware
    Vendor
    Qualcomm
    Product
    Qpa5460
    Vendor
    Qualcomm
    Product
    Qpa5460 Firmware
    Vendor
    Qualcomm
    Product
    Qtc800h
    Vendor
    Qualcomm
    Product
    Qtc800h Firmware
    Vendor
    Qualcomm
    Product
    Qtc800s
    Vendor
    Qualcomm
    Product
    Qtc800s Firmware
    Vendor
    Qualcomm
    Product
    Rsw8577
    Vendor
    Qualcomm
    Product
    Rsw8577 Firmware
    Vendor
    Qualcomm
    Product
    Sd455
    Vendor
    Qualcomm
    Product
    Sd455 Firmware
    Vendor
    Qualcomm
    Product
    Sd636
    Vendor
    Qualcomm
    Product
    Sd636 Firmware
    Vendor
    Qualcomm
    Product
    Sd660
    Vendor
    Qualcomm
    Product
    Sd660 Firmware
    Vendor
    Qualcomm
    Product
    Sdm630
    Vendor
    Qualcomm
    Product
    Sdm630 Firmware
    Vendor
    Qualcomm
    Product
    Sdr660
    Vendor
    Qualcomm
    Product
    Sdr660 Firmware
    Vendor
    Qualcomm
    Product
    Smb1351
    Vendor
    Qualcomm
    Product
    Smb1351 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9335
    Vendor
    Qualcomm
    Product
    Wcd9335 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9340
    Vendor
    Qualcomm
    Product
    Wcd9340 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9341
    Vendor
    Qualcomm
    Product
    Wcd9341 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3950
    Vendor
    Qualcomm
    Product
    Wcn3950 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3990
    Vendor
    Qualcomm
    Product
    Wcn3990 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-11262 (CVSS 7) — A race between command submission and destroying the context can cause an invalid context being added to the l…
    CVE-2020-11261 (CVSS 7.8) — Memory corruption due to improper check to return error when user application requests memory allocation of a …
    CVE-2020-11260 (CVSS 8.4) — An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industri…
    CVE-2020-11250 (CVSS 7) — Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdrago…
    CVE-2020-11241 (CVSS 7.5) — Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descri…
    CVE-2020-11240 (CVSS 7.8) — Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storag…
    CVE-2020-11239 (CVSS 7.8) — Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is n…
    CVE-2020-11238 (CVSS 7.5) — Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto,…
    CVE-2020-11235 (CVSS 7.8) — Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapd…
    CVE-2020-11233 (CVSS 7) — Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was re…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High