Lucene search

[email protected]CVE-2020-11210

HistoryApr 07, 2021 - 8:15 a.m.

CVE-2020-11210

2021-04-0708:15:13

CWE-787

[email protected]

web.nvd.nist.gov

cve

memory corruption

rpm region

xpu configuration

snapdragon

connectivity

industrial iot

mobile

wired infrastructure

networking

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

9.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommar8035_firmwareMatch-

AND

qualcommar8035Match-

Node

qualcommpm4125_firmwareMatch-

AND

qualcommpm4125Match-

Node

qualcommpm4250_firmwareMatch-

AND

qualcommpm4250Match-

Node

qualcommpm6125_firmwareMatch-

AND

qualcommpm6125Match-

Node

qualcommpm6150a_firmwareMatch-

AND

qualcommpm6150aMatch-

Node

qualcommpm6150l_firmwareMatch-

AND

qualcommpm6150lMatch-

Node

qualcommpm6350_firmwareMatch-

AND

qualcommpm6350Match-

Node

qualcommpm7250b_firmwareMatch-

AND

qualcommpm7250bMatch-

Node

qualcommpm8008_firmwareMatch-

AND

qualcommpm8008Match-

Node

qualcommpmd9655_firmwareMatch-

AND

qualcommpmd9655Match-

Node

qualcommpmi632_firmwareMatch-

AND

qualcommpmi632Match-

Node

qualcommpmk8003_firmwareMatch-

AND

qualcommpmk8003Match-

Node

qualcommqat3519_firmwareMatch-

AND

qualcommqat3519Match-

Node

qualcommqat3522_firmwareMatch-

AND

qualcommqat3522Match-

Node

qualcommqat3555_firmwareMatch-

AND

qualcommqat3555Match-

Node

qualcommqat5515_firmwareMatch-

AND

qualcommqat5515Match-

Node

qualcommqat5516_firmwareMatch-

AND

qualcommqat5516Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca9984_firmwareMatch-

AND

qualcommqca9984Match-

Node

qualcommqcm2290_firmwareMatch-

AND

qualcommqcm2290Match-

Node

qualcommqcm4290_firmwareMatch-

AND

qualcommqcm4290Match-

Node

qualcommqcs2290_firmwareMatch-

AND

qualcommqcs2290Match-

Node

qualcommqcs405_firmwareMatch-

AND

qualcommqcs405Match-

Node

qualcommqcs4290_firmwareMatch-

AND

qualcommqcs4290Match-

Node

qualcommqdm2301_firmwareMatch-

AND

qualcommqdm2301Match-

Node

qualcommqdm2302_firmwareMatch-

AND

qualcommqdm2302Match-

Node

qualcommqet4101_firmwareMatch-

AND

qualcommqet4101Match-

Node

qualcommqet6105_firmwareMatch-

AND

qualcommqet6105Match-

Node

qualcommqpa4360_firmwareMatch-

AND

qualcommqpa4360Match-

Node

qualcommqpa4361_firmwareMatch-

AND

qualcommqpa4361Match-

Node

qualcommqpa6560_firmwareMatch-

AND

qualcommqpa6560Match-

Node

qualcommqpa8673_firmwareMatch-

AND

qualcommqpa8673Match-

Node

qualcommqsw6310_firmwareMatch-

AND

qualcommqsw6310Match-

Node

qualcommqsw8573_firmwareMatch-

AND

qualcommqsw8573Match-

Node

qualcommqsw8574_firmwareMatch-

AND

qualcommqsw8574Match-

Node

qualcommqtc410s_firmwareMatch-

AND

qualcommqtc410sMatch-

Node

qualcommqtm525_firmwareMatch-

AND

qualcommqtm525Match-

Node

qualcommsd460_firmwareMatch-

AND

qualcommsd460Match-

Node

qualcommsd480_firmwareMatch-

AND

qualcommsd480Match-

Node

qualcommsd662_firmwareMatch-

AND

qualcommsd662Match-

Node

qualcommsd665_firmwareMatch-

AND

qualcommsd665Match-

Node

qualcommsdr425_firmwareMatch-

AND

qualcommsdr425Match-

Node

qualcommsdr660_firmwareMatch-

AND

qualcommsdr660Match-

Node

qualcommsdr735_firmwareMatch-

AND

qualcommsdr735Match-

Node

qualcommsdr735g_firmwareMatch-

AND

qualcommsdr735gMatch-

Node

qualcommsm4125_firmwareMatch-

AND

qualcommsm4125Match-

Node

qualcommsmb1351_firmwareMatch-

AND

qualcommsmb1351Match-

Node

qualcommsmb1354_firmwareMatch-

AND

qualcommsmb1354Match-

Node

qualcommsmb1355_firmwareMatch-

AND

qualcommsmb1355Match-

Node

qualcommsmb1396_firmwareMatch-

AND

qualcommsmb1396Match-

Node

qualcommsmr526_firmwareMatch-

AND

qualcommsmr526Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3910_firmwareMatch-

AND

qualcommwcn3910Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn3999_firmwareMatch-

AND

qualcommwcn3999Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwgr7640_firmwareMatch-

AND

qualcommwgr7640Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwtr2965_firmwareMatch-

AND

qualcommwtr2965Match-

Node

qualcommwtr3925_firmwareMatch-

AND

qualcommwtr3925Match-

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR8035, PM4125, PM4250, PM6125, PM6150A, PM6150L, PM6350, PM7250B, PM8008, PMD9655, PMI632, PMK8003, QAT3519, QAT3522, QAT3555, QAT5515, QAT5516, QCA6390, QCA9984, QCM2290, QCM4290, QCS2290, QCS405, QCS4290, QDM2301, QDM2302, QET4101, QET6105, QPA4360, QPA4361, QPA6560, QPA8673, QSW6310, QSW8573, QSW8574, QTC410S, QTM525, SD460, SD480, SD662, SD665, SDR425, SDR660, SDR735, SDR735G, SM4125, SMB1351, SMB1354, SMB1355, SMB1396, SMR526, WCD9370, WCD9375, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6850, WGR7640, WSA8810, WSA8815, WTR2965, WTR3925"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

9.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-11210

prion1 cvelist1 nvd1 qualysblog1