Lucene search

[email protected]CVE-2020-11143

HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11143

2021-01-2110:15:13

CWE-787

[email protected]

web.nvd.nist.gov

cve-2020-11143

out of bound memory access

music playback

snapdragon

vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommapq8009Match-

qualcommapq8017Match-

qualcommapq8030Match-

qualcommapq8037Match-

qualcommapq8052Match-

qualcommapq8053Match-

qualcommapq8056Match-

qualcommapq8060aMatch-

qualcommapq8062Match-

qualcommapq8064Match-

qualcommapq8064auMatch-

qualcommapq8076Match-

qualcommapq8084Match-

qualcommapq8096auMatch-

qualcommaqt1000Match-

qualcommar6003Match-

qualcommar8031Match-

qualcommar8035Match-

qualcommar8151Match-

qualcommar9374Match-

qualcommcsra6620Match-

qualcommcsra6640Match-

qualcommmdm8215Match-

qualcommmdm8215mMatch-

qualcommmdm8615mMatch-

qualcommmdm8635mMatch-

qualcommmdm9215Match-

qualcommmdm9225Match-

qualcommmdm9225mMatch-

qualcommmdm9230Match-

qualcommmdm9235mMatch-

qualcommmdm9310Match-

qualcommmdm9330Match-

qualcommmdm9615Match-

qualcommmdm9615mMatch-

qualcommmdm9625Match-

qualcommmdm9625mMatch-

qualcommmdm9630Match-

qualcommmdm9635mMatch-

qualcommmdm9640Match-

qualcommmdm9645Match-

qualcommmdm9650Match-

qualcommmdm9655Match-

qualcommmpq8064Match-

qualcommmsm8108Match-

qualcommmsm8208Match-

qualcommmsm8209Match-

qualcommmsm8226Match-

qualcommmsm8227Match-

qualcommmsm8230Match-

qualcommmsm8608Match-

qualcommmsm8610Match-

qualcommmsm8626Match-

qualcommmsm8627Match-

qualcommmsm8630Match-

qualcommmsm8917Match-

qualcommmsm8920Match-

qualcommmsm8930Match-

qualcommmsm8937Match-

qualcommmsm8940Match-

qualcommmsm8952Match-

qualcommmsm8953Match-

qualcommmsm8956Match-

qualcommmsm8960Match-

qualcommmsm8960sgMatch-

qualcommmsm8962Match-

qualcommmsm8976Match-

qualcommmsm8976sgMatch-

qualcommmsm8996auMatch-

qualcommpm215Match-

qualcommpm3003aMatch-

qualcommpm4125Match-

qualcommpm439Match-

qualcommpm456Match-

qualcommpm6125Match-

qualcommpm6150Match-

qualcommpm6150aMatch-

qualcommpm6150lMatch-

qualcommpm6250Match-

qualcommpm6350Match-

qualcommpm640aMatch-

qualcommpm640lMatch-

qualcommpm640pMatch-

qualcommpm660Match-

qualcommpm660aMatch-

qualcommpm660lMatch-

qualcommpm670Match-

qualcommpm670aMatch-

qualcommpm670lMatch-

qualcommpm7150aMatch-

qualcommpm7150lMatch-

qualcommpm7250Match-

qualcommpm7250bMatch-

qualcommpm7350cMatch-

qualcommpm8004Match-

qualcommpm8005Match-

qualcommpm8008Match-

qualcommpm8009Match-

qualcommpm8018Match-

qualcommpm8019Match-

qualcommpm8110Match-

qualcommpm8150Match-

qualcommpm8150aMatch-

qualcommpm8150bMatch-

qualcommpm8150cMatch-

qualcommpm8150lMatch-

qualcommpm8226Match-

qualcommpm8250Match-

qualcommpm8350Match-

qualcommpm8350bMatch-

qualcommpm8350bhMatch-

qualcommpm8350bhsMatch-

qualcommpm8350cMatch-

qualcommpm855Match-

qualcommpm855aMatch-

qualcommpm855bMatch-

qualcommpm855lMatch-

qualcommpm855pMatch-

qualcommpm8821Match-

qualcommpm8909Match-

qualcommpm8916Match-

qualcommpm8917Match-

qualcommpm8921Match-

qualcommpm8922Match-

qualcommpm8937Match-

qualcommpm8940Match-

qualcommpm8952Match-

qualcommpm8953Match-

qualcommpm8956Match-

qualcommpm8996Match-

qualcommpm8998Match-

qualcommpmc1000hMatch-

qualcommpmd9635Match-

qualcommpmd9645Match-

qualcommpmd9655Match-

qualcommpme605Match-

qualcommpmi632Match-

qualcommpmi8937Match-

qualcommpmi8940Match-

qualcommpmi8952Match-

qualcommpmi8994Match-

qualcommpmi8996Match-

qualcommpmi8998Match-

qualcommpmk7350Match-

qualcommpmk8001Match-

qualcommpmk8002Match-

qualcommpmk8003Match-

qualcommpmk8350Match-

qualcommpmm6155auMatch-

qualcommpmm8155auMatch-

qualcommpmm8195auMatch-

qualcommpmm855auMatch-

qualcommpmm8996auMatch-

qualcommpmr525Match-

qualcommpmr735aMatch-

qualcommpmr735bMatch-

qualcommpmw3100Match-

qualcommpmx50Match-

qualcommpmx55Match-

qualcommqat3514Match-

qualcommqat3516Match-

qualcommqat3518Match-

qualcommqat3519Match-

qualcommqat3522Match-

qualcommqat3550Match-

qualcommqat3555Match-

qualcommqat5515Match-

qualcommqat5516Match-

qualcommqat5522Match-

qualcommqat5533Match-

qualcommqat5568Match-

qualcommqbt1000Match-

qualcommqbt1500Match-

qualcommqbt2000Match-

qualcommqca1990Match-

qualcommqca4020Match-

qualcommqca6174Match-

qualcommqca6174aMatch-

qualcommqca6175aMatch-

qualcommqca6310Match-

qualcommqca6320Match-

qualcommqca6335Match-

qualcommqca6390Match-

qualcommqca6391Match-

qualcommqca6420Match-

qualcommqca6421Match-

qualcommqca6426Match-

qualcommqca6430Match-

qualcommqca6431Match-

qualcommqca6436Match-

qualcommqca6564Match-

qualcommqca6564aMatch-

qualcommqca6564auMatch-

qualcommqca6574Match-

qualcommqca6574aMatch-

qualcommqca6574auMatch-

qualcommqca6584Match-

qualcommqca6584auMatch-

qualcommqca6595Match-

qualcommqca6595auMatch-

qualcommqca6694Match-

qualcommqca6694auMatch-

qualcommqca6696Match-

qualcommqca8337Match-

qualcommqca9379Match-

qualcommqca9984Match-

qualcommqcc112Match-

qualcommqcm2290Match-

qualcommqcm4290Match-

qualcommqcm6125Match-

qualcommqcs2290Match-

qualcommqcs405Match-

qualcommqcs410Match-

qualcommqcs4290Match-

qualcommqcs603Match-

qualcommqcs605Match-

qualcommqcs610Match-

qualcommqcs6125Match-

qualcommqdm2301Match-

qualcommqdm2302Match-

qualcommqdm2305Match-

qualcommqdm2307Match-

qualcommqdm2308Match-

qualcommqdm2310Match-

qualcommqdm3301Match-

qualcommqdm3302Match-

qualcommqdm4643Match-

qualcommqdm4650Match-

qualcommqdm5579Match-

qualcommqdm5620Match-

qualcommqdm5621Match-

qualcommqdm5650Match-

qualcommqdm5652Match-

qualcommqdm5670Match-

qualcommqdm5671Match-

qualcommqdm5677Match-

qualcommqdm5679Match-

qualcommqet4100Match-

qualcommqet4101Match-

qualcommqet4200aqMatch-

qualcommqet5100Match-

qualcommqet5100mMatch-

qualcommqet6100Match-

qualcommqet6110Match-

qualcommqfe1040Match-

qualcommqfe1045Match-

qualcommqfe1055Match-

qualcommqfe1100Match-

qualcommqfe2080fcMatch-

qualcommqfe2081fcMatch-

qualcommqfe2082fcMatch-

qualcommqfe2101Match-

qualcommqfe2330Match-

qualcommqfe2340Match-

qualcommqfe2520Match-

qualcommqfe2550Match-

qualcommqfe3100Match-

qualcommqfe3320Match-

qualcommqfe3335Match-

qualcommqfe3340Match-

qualcommqfe3345Match-

qualcommqfe3440fcMatch-

qualcommqfe4301Match-

qualcommqfe4302Match-

qualcommqfe4303Match-

qualcommqfe4305Match-

qualcommqfe4308Match-

qualcommqfe4309Match-

qualcommqfe4320Match-

qualcommqfe4373fcMatch-

qualcommqfe4455fcMatch-

qualcommqfe4465fcMatch-

qualcommqfs2530Match-

qualcommqfs2580Match-

qualcommqfs2608Match-

qualcommqfs2630Match-

qualcommqln1020Match-

qualcommqln1021aqMatch-

qualcommqln1030Match-

qualcommqln1031Match-

qualcommqln1035bdMatch-

qualcommqln1036aqMatch-

qualcommqln4640Match-

qualcommqln4642Match-

qualcommqln4650Match-

qualcommqln5020Match-

qualcommqln5030Match-

qualcommqln5040Match-

qualcommqpa2625Match-

qualcommqpa4340Match-

qualcommqpa4360Match-

qualcommqpa4361Match-

qualcommqpa5373Match-

qualcommqpa5460Match-

qualcommqpa5461Match-

qualcommqpa5580Match-

qualcommqpa5581Match-

qualcommqpa6560Match-

qualcommqpa8673Match-

qualcommqpa8675Match-

qualcommqpa8686Match-

qualcommqpa8801Match-

qualcommqpa8802Match-

qualcommqpa8803Match-

qualcommqpa8821Match-

qualcommqpa8842Match-

qualcommqpm2630Match-

qualcommqpm4621Match-

qualcommqpm4630Match-

qualcommqpm4640Match-

qualcommqpm4641Match-

qualcommqpm4650Match-

qualcommqpm5620Match-

qualcommqpm5621Match-

qualcommqpm5641Match-

qualcommqpm5657Match-

qualcommqpm5658Match-

qualcommqpm5670Match-

qualcommqpm5677Match-

qualcommqpm5679Match-

qualcommqpm5870Match-

qualcommqpm5875Match-

qualcommqpm6582Match-

qualcommqpm6585Match-

qualcommqpm6621Match-

qualcommqpm6670Match-

qualcommqpm8820Match-

qualcommqpm8830Match-

qualcommqpm8870Match-

qualcommqpm8895Match-

qualcommqsc1215Match-

qualcommqsm7250Match-

qualcommqsm8250Match-

qualcommqsw6310Match-

qualcommqsw8573Match-

qualcommqsw8574Match-

qualcommqtc410sMatch-

qualcommqtc800hMatch-

qualcommqtc800sMatch-

qualcommqtc800tMatch-

qualcommqtc801sMatch-

qualcommqtm525Match-

qualcommqtm527Match-

qualcommqualcomm215Match-

qualcommrgr7640auMatch-

qualcommrsw8577Match-

qualcommrtr8600Match-

qualcommrtr8601Match-

qualcommsa6145pMatch-

qualcommsa6150pMatch-

qualcommsa6155Match-

qualcommsa6155pMatch-

qualcommsa8150pMatch-

qualcommsa8155Match-

qualcommsa8155pMatch-

qualcommsa8195pMatch-

qualcommsc8180x\+sdx55Match-

qualcommsd210Match-

qualcommsd429Match-

qualcommsd439Match-

qualcommsd450Match-

qualcommsd455Match-

qualcommsd460Match-

qualcommsd632Match-

qualcommsd636Match-

qualcommsd660Match-

qualcommsd662Match-

qualcommsd665Match-

qualcommsd670Match-

qualcommsd675Match-

qualcommsd6905gMatch-

qualcommsd710Match-

qualcommsd712Match-

qualcommsd720gMatch-

qualcommsd730Match-

qualcommsd750gMatch-

qualcommsd765Match-

qualcommsd765gMatch-

qualcommsd768gMatch-

qualcommsd820Match-

qualcommsd821Match-

qualcommsd835Match-

qualcommsd845Match-

qualcommsd850Match-

qualcommsd855Match-

qualcommsd8655gMatch-

qualcommsd8885gMatch-

qualcommsd8cMatch-

qualcommsd8cxMatch-

qualcommsda429wMatch-

qualcommsdm429wMatch-

qualcommsdm630Match-

qualcommsdm830Match-

qualcommsdr051Match-

qualcommsdr052Match-

qualcommsdr425Match-

qualcommsdr660Match-

qualcommsdr660gMatch-

qualcommsdr675Match-

qualcommsdr735Match-

qualcommsdr735gMatch-

qualcommsdr8150Match-

qualcommsdr8250Match-

qualcommsdr845Match-

qualcommsdr865Match-

qualcommsdx50mMatch-

qualcommsdx55Match-

qualcommsdx55mMatch-

qualcommsdxr1Match-

qualcommsdxr25gMatch-

qualcommsm4125Match-

qualcommsm6250Match-

qualcommsm6250pMatch-

qualcommsm7250pMatch-

qualcommsm7350Match-

qualcommsmb1350Match-

qualcommsmb1351Match-

qualcommsmb1354Match-

qualcommsmb1355Match-

qualcommsmb1357Match-

qualcommsmb1358Match-

qualcommsmb1360Match-

qualcommsmb1380Match-

qualcommsmb1381Match-

qualcommsmb1390Match-

qualcommsmb1394Match-

qualcommsmb1395Match-

qualcommsmb1396Match-

qualcommsmb1398Match-

qualcommsmb2351Match-

qualcommsmr525Match-

qualcommsmr526Match-

qualcommsmr545Match-

qualcommsmr546Match-

qualcommwcd9306Match-

qualcommwcd9310Match-

qualcommwcd9320Match-

qualcommwcd9326Match-

qualcommwcd9330Match-

qualcommwcd9335Match-

qualcommwcd9340Match-

qualcommwcd9341Match-

qualcommwcd9360Match-

qualcommwcd9370Match-

qualcommwcd9371Match-

qualcommwcd9375Match-

qualcommwcd9380Match-

qualcommwcd9385Match-

qualcommwcn2243Match-

qualcommwcn3610Match-

qualcommwcn3615Match-

qualcommwcn3620Match-

qualcommwcn3660Match-

qualcommwcn3660aMatch-

qualcommwcn3660bMatch-

qualcommwcn3680Match-

qualcommwcn3680bMatch-

qualcommwcn3910Match-

qualcommwcn3950Match-

qualcommwcn3980Match-

qualcommwcn3988Match-

qualcommwcn3990Match-

qualcommwcn3991Match-

qualcommwcn3998Match-

qualcommwcn3999Match-

qualcommwcn6740Match-

qualcommwcn6750Match-

qualcommwcn6850Match-

qualcommwcn6851Match-

qualcommwcn6856Match-

qualcommwfr1620Match-

qualcommwfr2600Match-

qualcommwgr7640Match-

qualcommwhs9410Match-

qualcommwsa8810Match-

qualcommwsa8815Match-

qualcommwsa8830Match-

qualcommwsa8835Match-

qualcommwtr1605Match-

qualcommwtr1605lMatch-

qualcommwtr1625Match-

qualcommwtr1625lMatch-

qualcommwtr2100Match-

qualcommwtr2605Match-

qualcommwtr2655Match-

qualcommwtr2955Match-

qualcommwtr2965Match-

qualcommwtr3905Match-

qualcommwtr3925Match-

qualcommwtr3950Match-

qualcommwtr4605Match-

qualcommwtr4905Match-

qualcommwtr5975Match-

qualcommwtr6955Match-

CPENameOperatorVersion
qualcomm:apq8009qualcomm apq8009eq-
qualcomm:apq8017qualcomm apq8017eq-
qualcomm:apq8030qualcomm apq8030eq-
qualcomm:apq8037qualcomm apq8037eq-
qualcomm:apq8052qualcomm apq8052eq-
qualcomm:apq8053qualcomm apq8053eq-
qualcomm:apq8056qualcomm apq8056eq-
qualcomm:apq8060aqualcomm apq8060aeq-
qualcomm:apq8062qualcomm apq8062eq-
qualcomm:apq8064qualcomm apq8064eq-

CPE	Name	Operator	Version
qualcomm:apq8009	qualcomm apq8009	eq	-
qualcomm:apq8017	qualcomm apq8017	eq	-
qualcomm:apq8030	qualcomm apq8030	eq	-
qualcomm:apq8037	qualcomm apq8037	eq	-
qualcomm:apq8052	qualcomm apq8052	eq	-
qualcomm:apq8053	qualcomm apq8053	eq	-
qualcomm:apq8056	qualcomm apq8056	eq	-
qualcomm:apq8060a	qualcomm apq8060a	eq	-
qualcomm:apq8062	qualcomm apq8062	eq	-
qualcomm:apq8064	qualcomm apq8064	eq	-

Rows per page:

1-10 of 4941

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8030, APQ8037, APQ8052, APQ8053, APQ8056, APQ8060A, APQ8062, APQ8064, APQ8064AU, APQ8076, APQ8084, APQ8096AU, AQT1000, AR6003, AR8031, AR8035, AR8151, AR9374, CSRA6620, CSRA6640, MDM8215, MDM8215M, MDM8615M, MDM8635M, MDM9215, MDM9225, MDM9225M, MDM9230, MDM9235M, MDM9310, MDM9330, MDM9615, MDM9615M, MDM9625, MDM9625M, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MPQ8064, MSM8108, MSM8208, MSM8209, MSM8226, MSM8227, MSM8230, MSM8608, MSM8610, MSM8626, MSM8627, MSM8630, MSM8917, MSM8920, MSM8930, MSM8937, MSM8940, MSM8952, MSM8953, MSM8956, MSM8960, MSM8960SG, MSM8962, MSM8976, MSM8976SG, MSM8996AU, PM215, PM3003A, PM4125, PM439, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8110, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8226, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Social References

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for CVE-2020-11143

cvelist1 nvd1 prion1