CVE-2020-11133

🗓️ 08 Sep 2020 09:31:37Reported by qualcommType

Possible out of bound array write in rxdco cal utility due to lack of array bound check in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR113

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2020-11133	8 Sep 202009:31	–	cvelist
EUVD	EUVD-2020-3487	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Android	10 Sep 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Samsung Mobile	7 Oct 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Blackberry Android	16 Oct 202000:00	–	ncsc
NVD	CVE-2020-11133	8 Sep 202010:15	–	nvd
Prion	Out-of-bounds	8 Sep 202010:15	–	prion
RedhatCVE	CVE-2020-11133	22 May 202515:56	–	redhatcve

NVD

Node

qualcomm msm8998_firmwareMatch-

AND

qualcomm msm8998Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdm850_firmwareMatch-

AND

qualcomm sdm850Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

[
  {
    "product": "Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin

21 Nov 2024 04:56Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00043

CWE-120