Lucene search

K
cveQualcommCVE-2020-11149
HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11149

2021-01-2110:15:13
CWE-119
qualcomm
web.nvd.nist.gov
32
2
cve-2020-11149
out of bound access
camera driver
snapdragon auto
snapdragon compute
snapdragon connectivity
snapdragon consumer iot
snapdragon industrial iot
snapdragon mobile
snapdragon voice & music
snapdragon wearables

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0

Percentile

12.6%

Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

Nvd
Node
qualcommapq8053Match-
OR
qualcommapq8096auMatch-
OR
qualcommaqt1000Match-
OR
qualcommar8031Match-
OR
qualcommar8035Match-
OR
qualcommcsra6620Match-
OR
qualcommcsra6640Match-
OR
qualcommmdm9650Match-
OR
qualcommpm215Match-
OR
qualcommpm3003aMatch-
OR
qualcommpm6125Match-
OR
qualcommpm6150Match-
OR
qualcommpm6150aMatch-
OR
qualcommpm6150lMatch-
OR
qualcommpm6350Match-
OR
qualcommpm640aMatch-
OR
qualcommpm640lMatch-
OR
qualcommpm640pMatch-
OR
qualcommpm660Match-
OR
qualcommpm660lMatch-
OR
qualcommpm670Match-
OR
qualcommpm670aMatch-
OR
qualcommpm670lMatch-
OR
qualcommpm7150aMatch-
OR
qualcommpm7150lMatch-
OR
qualcommpm7250Match-
OR
qualcommpm7250bMatch-
OR
qualcommpm7350cMatch-
OR
qualcommpm8004Match-
OR
qualcommpm8005Match-
OR
qualcommpm8008Match-
OR
qualcommpm8009Match-
OR
qualcommpm8150Match-
OR
qualcommpm8150aMatch-
OR
qualcommpm8150bMatch-
OR
qualcommpm8150cMatch-
OR
qualcommpm8150lMatch-
OR
qualcommpm8250Match-
OR
qualcommpm8350Match-
OR
qualcommpm8350bMatch-
OR
qualcommpm8350bhMatch-
OR
qualcommpm8350bhsMatch-
OR
qualcommpm8350cMatch-
OR
qualcommpm855Match-
OR
qualcommpm855aMatch-
OR
qualcommpm855bMatch-
OR
qualcommpm855lMatch-
OR
qualcommpm855pMatch-
OR
qualcommpm8909Match-
OR
qualcommpm8916Match-
OR
qualcommpm8953Match-
OR
qualcommpm8998Match-
OR
qualcommpmc1000hMatch-
OR
qualcommpmd9655Match-
OR
qualcommpme605Match-
OR
qualcommpmi632Match-
OR
qualcommpmi8952Match-
OR
qualcommpmi8998Match-
OR
qualcommpmk7350Match-
OR
qualcommpmk8002Match-
OR
qualcommpmk8003Match-
OR
qualcommpmk8350Match-
OR
qualcommpmm6155auMatch-
OR
qualcommpmm8155auMatch-
OR
qualcommpmm855auMatch-
OR
qualcommpmm8996auMatch-
OR
qualcommpmr525Match-
OR
qualcommpmr735aMatch-
OR
qualcommpmr735bMatch-
OR
qualcommpmw3100Match-
OR
qualcommpmx20Match-
OR
qualcommpmx24Match-
OR
qualcommpmx55Match-
OR
qualcommqat3514Match-
OR
qualcommqat3516Match-
OR
qualcommqat3518Match-
OR
qualcommqat3519Match-
OR
qualcommqat3522Match-
OR
qualcommqat3550Match-
OR
qualcommqat3555Match-
OR
qualcommqat5515Match-
OR
qualcommqat5516Match-
OR
qualcommqat5522Match-
OR
qualcommqat5533Match-
OR
qualcommqat5568Match-
OR
qualcommqbt1500Match-
OR
qualcommqbt2000Match-
OR
qualcommqca4020Match-
OR
qualcommqca6174aMatch-
OR
qualcommqca6390Match-
OR
qualcommqca6391Match-
OR
qualcommqca6420Match-
OR
qualcommqca6421Match-
OR
qualcommqca6426Match-
OR
qualcommqca6430Match-
OR
qualcommqca6431Match-
OR
qualcommqca6436Match-
OR
qualcommqca6564Match-
OR
qualcommqca6564aMatch-
OR
qualcommqca6564auMatch-
OR
qualcommqca6574Match-
OR
qualcommqca6574aMatch-
OR
qualcommqca6574auMatch-
OR
qualcommqca6584auMatch-
OR
qualcommqca6595auMatch-
OR
qualcommqca6696Match-
OR
qualcommqca8337Match-
OR
qualcommqca9377Match-
OR
qualcommqca9379Match-
OR
qualcommqcm4290Match-
OR
qualcommqcs405Match-
OR
qualcommqcs4290Match-
OR
qualcommqcs603Match-
OR
qualcommqcs605Match-
OR
qualcommqdm2301Match-
OR
qualcommqdm2302Match-
OR
qualcommqdm2305Match-
OR
qualcommqdm2307Match-
OR
qualcommqdm2308Match-
OR
qualcommqdm2310Match-
OR
qualcommqdm3301Match-
OR
qualcommqdm3302Match-
OR
qualcommqdm4643Match-
OR
qualcommqdm4650Match-
OR
qualcommqdm5579Match-
OR
qualcommqdm5620Match-
OR
qualcommqdm5621Match-
OR
qualcommqdm5650Match-
OR
qualcommqdm5652Match-
OR
qualcommqdm5670Match-
OR
qualcommqdm5671Match-
OR
qualcommqdm5677Match-
OR
qualcommqdm5679Match-
OR
qualcommqet4100Match-
OR
qualcommqet4101Match-
OR
qualcommqet5100Match-
OR
qualcommqet5100mMatch-
OR
qualcommqet6100Match-
OR
qualcommqet6110Match-
OR
qualcommqfs2530Match-
OR
qualcommqfs2580Match-
OR
qualcommqfs2608Match-
OR
qualcommqfs2630Match-
OR
qualcommqln1030Match-
OR
qualcommqln4642Match-
OR
qualcommqln4650Match-
OR
qualcommqln5020Match-
OR
qualcommqln5030Match-
OR
qualcommqln5040Match-
OR
qualcommqpa2625Match-
OR
qualcommqpa4360Match-
OR
qualcommqpa4361Match-
OR
qualcommqpa5460Match-
OR
qualcommqpa5461Match-
OR
qualcommqpa5580Match-
OR
qualcommqpa5581Match-
OR
qualcommqpa6560Match-
OR
qualcommqpa8673Match-
OR
qualcommqpa8686Match-
OR
qualcommqpa8801Match-
OR
qualcommqpa8802Match-
OR
qualcommqpa8803Match-
OR
qualcommqpa8821Match-
OR
qualcommqpa8842Match-
OR
qualcommqpm4621Match-
OR
qualcommqpm4630Match-
OR
qualcommqpm4640Match-
OR
qualcommqpm4641Match-
OR
qualcommqpm4650Match-
OR
qualcommqpm5541Match-
OR
qualcommqpm5577Match-
OR
qualcommqpm5579Match-
OR
qualcommqpm5621Match-
OR
qualcommqpm5641Match-
OR
qualcommqpm5658Match-
OR
qualcommqpm5670Match-
OR
qualcommqpm5677Match-
OR
qualcommqpm5679Match-
OR
qualcommqpm5870Match-
OR
qualcommqpm5875Match-
OR
qualcommqpm6325Match-
OR
qualcommqpm6375Match-
OR
qualcommqpm6582Match-
OR
qualcommqpm6585Match-
OR
qualcommqpm6621Match-
OR
qualcommqpm6670Match-
OR
qualcommqpm8820Match-
OR
qualcommqpm8830Match-
OR
qualcommqpm8870Match-
OR
qualcommqpm8895Match-
OR
qualcommqsm7250Match-
OR
qualcommqsw6310Match-
OR
qualcommqsw8573Match-
OR
qualcommqsw8574Match-
OR
qualcommqtc410sMatch-
OR
qualcommqtc800hMatch-
OR
qualcommqtc800sMatch-
OR
qualcommqtc801sMatch-
OR
qualcommqtm525Match-
OR
qualcommqtm527Match-
OR
qualcommqualcomm215Match-
OR
qualcommsa6145pMatch-
OR
qualcommsa6155pMatch-
OR
qualcommsa8155Match-
OR
qualcommsa8155pMatch-
OR
qualcommsd205Match-
OR
qualcommsd210Match-
OR
qualcommsd429Match-
OR
qualcommsd460Match-
OR
qualcommsd662Match-
OR
qualcommsd665Match-
OR
qualcommsd675Match-
OR
qualcommsd6905gMatch-
OR
qualcommsd750gMatch-
OR
qualcommsd765Match-
OR
qualcommsd765gMatch-
OR
qualcommsd768gMatch-
OR
qualcommsd855Match-
OR
qualcommsd8655gMatch-
OR
qualcommsd8885gMatch-
OR
qualcommsd8cMatch-
OR
qualcommsd8cxMatch-
OR
qualcommsda429wMatch-
OR
qualcommsdm429wMatch-
OR
qualcommsdm830Match-
OR
qualcommsdr425Match-
OR
qualcommsdr660Match-
OR
qualcommsdr660gMatch-
OR
qualcommsdr735Match-
OR
qualcommsdr735gMatch-
OR
qualcommsdr8150Match-
OR
qualcommsdr8250Match-
OR
qualcommsdr865Match-
OR
qualcommsdx20Match-
OR
qualcommsdx20mMatch-
OR
qualcommsdx24Match-
OR
qualcommsdx55Match-
OR
qualcommsdx55mMatch-
OR
qualcommsdxr1Match-
OR
qualcommsdxr25gMatch-
OR
qualcommsm7250pMatch-
OR
qualcommsm7350Match-
OR
qualcommsmb1350Match-
OR
qualcommsmb1351Match-
OR
qualcommsmb1354Match-
OR
qualcommsmb1355Match-
OR
qualcommsmb1357Match-
OR
qualcommsmb1381Match-
OR
qualcommsmb1390Match-
OR
qualcommsmb1394Match-
OR
qualcommsmb1395Match-
OR
qualcommsmb1396Match-
OR
qualcommsmb1398Match-
OR
qualcommsmb2351Match-
OR
qualcommsmr525Match-
OR
qualcommsmr526Match-
OR
qualcommsmr545Match-
OR
qualcommsmr546Match-
OR
qualcommwcd9326Match-
OR
qualcommwcd9335Match-
OR
qualcommwcd9340Match-
OR
qualcommwcd9341Match-
OR
qualcommwcd9370Match-
OR
qualcommwcd9375Match-
OR
qualcommwcd9380Match-
OR
qualcommwcd9385Match-
OR
qualcommwcn3610Match-
OR
qualcommwcn3615Match-
OR
qualcommwcn3620Match-
OR
qualcommwcn3660bMatch-
OR
qualcommwcn3680Match-
OR
qualcommwcn3680bMatch-
OR
qualcommwcn3950Match-
OR
qualcommwcn3980Match-
OR
qualcommwcn3988Match-
OR
qualcommwcn3990Match-
OR
qualcommwcn3991Match-
OR
qualcommwcn3998Match-
OR
qualcommwcn3999Match-
OR
qualcommwcn6740Match-
OR
qualcommwcn6750Match-
OR
qualcommwcn6850Match-
OR
qualcommwcn6851Match-
OR
qualcommwcn6856Match-
OR
qualcommwgr7640Match-
OR
qualcommwsa8810Match-
OR
qualcommwsa8815Match-
OR
qualcommwsa8830Match-
OR
qualcommwsa8835Match-
OR
qualcommwtr2965Match-
OR
qualcommwtr3925Match-
OR
qualcommwtr4905Match-
OR
qualcommwtr5975Match-
VendorProductVersionCPE
qualcommapq8053-cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
qualcommapq8096au-cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommar8031-cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*
qualcommar8035-cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
qualcommcsra6620-cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*
qualcommcsra6640-cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*
qualcommmdm9650-cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*
qualcommpm215-cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*
qualcommpm3003a-cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 2931

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8053, APQ8096AU, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, MDM9650, PM215, PM3003A, PM6125, PM6150, PM6150A, PM6150L, PM6350, PM640A, PM640L, PM640P, PM660, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8909, PM8916, PM8953, PM8998, PMC1000H, PMD9655, PME605, PMI632, PMI8952, PMI8998, PMK7350, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM855AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMW3100, PMX20, PMX24, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9377, QCA9379, QCM4290, QCS405, QCS4290, QCS603, QCS605, QDM ...[truncated*]"
      }
    ]
  }
]

Social References

More

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVE-2020-11149