Lucene search

QualcommCVE-2020-11216

HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11216

2021-01-2110:15:14

CWE-190

CWE-125

qualcomm

web.nvd.nist.gov

cve-2020-11216

buffer over read

video driver

snapdragon auto

snapdragon compute

snapdragon connectivity

snapdragon consumer iot

snapdragon industrial iot

snapdragon mobile

snapdragon voice & music

snapdragon wearables

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

Nvd

Node

qualcommapq8009Match-

qualcommapq8009wMatch-

qualcommapq8017Match-

qualcommapq8037Match-

qualcommapq8053Match-

qualcommapq8064auMatch-

qualcommapq8096auMatch-

qualcommaqt1000Match-

qualcommar8031Match-

qualcommar8151Match-

qualcommcsra6620Match-

qualcommcsra6640Match-

qualcommfsm10055Match-

qualcommfsm10056Match-

qualcommmdm9206Match-

qualcommmdm9650Match-

qualcommmsm8909wMatch-

qualcommmsm8917Match-

qualcommmsm8920Match-

qualcommmsm8937Match-

qualcommmsm8940Match-

qualcommmsm8953Match-

qualcommmsm8996auMatch-

qualcommpm215Match-

qualcommpm3003aMatch-

qualcommpm439Match-

qualcommpm456Match-

qualcommpm6125Match-

qualcommpm6150Match-

qualcommpm6150aMatch-

qualcommpm6150lMatch-

qualcommpm6250Match-

qualcommpm6350Match-

qualcommpm640aMatch-

qualcommpm640lMatch-

qualcommpm640pMatch-

qualcommpm660Match-

qualcommpm660aMatch-

qualcommpm660lMatch-

qualcommpm670Match-

qualcommpm670aMatch-

qualcommpm670lMatch-

qualcommpm7150aMatch-

qualcommpm7150lMatch-

qualcommpm7250Match-

qualcommpm7250bMatch-

qualcommpm7350cMatch-

qualcommpm8004Match-

qualcommpm8005Match-

qualcommpm8008Match-

qualcommpm8009Match-

qualcommpm8150aMatch-

qualcommpm8150bMatch-

qualcommpm8150cMatch-

qualcommpm8150lMatch-

qualcommpm8250Match-

qualcommpm8350Match-

qualcommpm8350bMatch-

qualcommpm8350bhMatch-

qualcommpm8350bhsMatch-

qualcommpm8350cMatch-

qualcommpm855Match-

qualcommpm855bMatch-

qualcommpm855lMatch-

qualcommpm855pMatch-

qualcommpm8909Match-

qualcommpm8916Match-

qualcommpm8937Match-

qualcommpm8940Match-

qualcommpm8953Match-

qualcommpm8996Match-

qualcommpm8998Match-

qualcommpmd9607Match-

qualcommpmd9655Match-

qualcommpme605Match-

qualcommpmi632Match-

qualcommpmi8937Match-

qualcommpmi8952Match-

qualcommpmi8994Match-

qualcommpmi8996Match-

qualcommpmi8998Match-

qualcommpmk7350Match-

qualcommpmk8001Match-

qualcommpmk8002Match-

qualcommpmk8003Match-

qualcommpmk8350Match-

qualcommpmm6155auMatch-

qualcommpmm8155auMatch-

qualcommpmm8195auMatch-

qualcommpmm855auMatch-

qualcommpmm8996auMatch-

qualcommpmr525Match-

qualcommpmr735aMatch-

qualcommpmr735bMatch-

qualcommpmw3100Match-

qualcommpmx20Match-

qualcommpmx50Match-

qualcommpmx55Match-

qualcommqat3514Match-

qualcommqat3516Match-

qualcommqat3518Match-

qualcommqat3519Match-

qualcommqat3522Match-

qualcommqat3550Match-

qualcommqat3555Match-

qualcommqat5515Match-

qualcommqat5516Match-

qualcommqat5522Match-

qualcommqat5533Match-

qualcommqat5568Match-

qualcommqbt1500Match-

qualcommqbt2000Match-

qualcommqca4020Match-

qualcommqca6174aMatch-

qualcommqca6175aMatch-

qualcommqca6310Match-

qualcommqca6335Match-

qualcommqca6390Match-

qualcommqca6391Match-

qualcommqca6420Match-

qualcommqca6421Match-

qualcommqca6426Match-

qualcommqca6430Match-

qualcommqca6431Match-

qualcommqca6436Match-

qualcommqca6564Match-

qualcommqca6564aMatch-

qualcommqca6564auMatch-

qualcommqca6574Match-

qualcommqca6574aMatch-

qualcommqca6574auMatch-

qualcommqca6595Match-

qualcommqca6595auMatch-

qualcommqca6696Match-

qualcommqca9367Match-

qualcommqca9377Match-

qualcommqca9379Match-

qualcommqcm4290Match-

qualcommqcs405Match-

qualcommqcs410Match-

qualcommqcs4290Match-

qualcommqcs603Match-

qualcommqcs605Match-

qualcommqcs610Match-

qualcommqdm2301Match-

qualcommqdm2302Match-

qualcommqdm2305Match-

qualcommqdm2307Match-

qualcommqdm2308Match-

qualcommqdm2310Match-

qualcommqdm3301Match-

qualcommqdm3302Match-

qualcommqdm4643Match-

qualcommqdm4650Match-

qualcommqdm5579Match-

qualcommqdm5620Match-

qualcommqdm5621Match-

qualcommqdm5650Match-

qualcommqdm5652Match-

qualcommqdm5670Match-

qualcommqdm5671Match-

qualcommqdm5677Match-

qualcommqdm5679Match-

qualcommqet4100Match-

qualcommqet4101Match-

qualcommqet4200aqMatch-

qualcommqet5100Match-

qualcommqet5100mMatch-

qualcommqet6100Match-

qualcommqet6110Match-

qualcommqfe2101Match-

qualcommqfe2520Match-

qualcommqfe2550Match-

qualcommqfe3340Match-

qualcommqfe4301Match-

qualcommqfe4302Match-

qualcommqfe4303Match-

qualcommqfe4305Match-

qualcommqfe4308Match-

qualcommqfe4309Match-

qualcommqfe4320Match-

qualcommqfe4373fcMatch-

qualcommqfs2530Match-

qualcommqfs2580Match-

qualcommqfs2608Match-

qualcommqfs2630Match-

qualcommqln1020Match-

qualcommqln1021aqMatch-

qualcommqln1030Match-

qualcommqln1031Match-

qualcommqln1036aqMatch-

qualcommqln4640Match-

qualcommqln4642Match-

qualcommqln4650Match-

qualcommqln5020Match-

qualcommqln5030Match-

qualcommqln5040Match-

qualcommqpa2625Match-

qualcommqpa4340Match-

qualcommqpa4360Match-

qualcommqpa4361Match-

qualcommqpa5373Match-

qualcommqpa5460Match-

qualcommqpa5461Match-

qualcommqpa5580Match-

qualcommqpa5581Match-

qualcommqpa6560Match-

qualcommqpa8673Match-

qualcommqpa8675Match-

qualcommqpa8686Match-

qualcommqpa8801Match-

qualcommqpa8802Match-

qualcommqpa8803Match-

qualcommqpa8821Match-

qualcommqpa8842Match-

qualcommqpm4621Match-

qualcommqpm4630Match-

qualcommqpm4640Match-

qualcommqpm4641Match-

qualcommqpm4650Match-

qualcommqpm5621Match-

qualcommqpm5641Match-

qualcommqpm5658Match-

qualcommqpm5670Match-

qualcommqpm5677Match-

qualcommqpm5679Match-

qualcommqpm5870Match-

qualcommqpm5875Match-

qualcommqpm6582Match-

qualcommqpm6585Match-

qualcommqpm6621Match-

qualcommqpm6670Match-

qualcommqpm8820Match-

qualcommqpm8830Match-

qualcommqpm8870Match-

qualcommqpm8895Match-

qualcommqsm7250Match-

qualcommqsw6310Match-

qualcommqsw8573Match-

qualcommqsw8574Match-

qualcommqtc410sMatch-

qualcommqtc800hMatch-

qualcommqtc800sMatch-

qualcommqtc801sMatch-

qualcommqtm525Match-

qualcommqualcomm215Match-

qualcommrgr7640auMatch-

qualcommrsw8577Match-

qualcommsa6145pMatch-

qualcommsa6155Match-

qualcommsa6155pMatch-

qualcommsa8150pMatch-

qualcommsa8155Match-

qualcommsa8155pMatch-

qualcommsa8195pMatch-

qualcommsd205Match-

qualcommsd210Match-

qualcommsd429Match-

qualcommsd439Match-

qualcommsd450Match-

qualcommsd455Match-

qualcommsd460Match-

qualcommsd632Match-

qualcommsd636Match-

qualcommsd660Match-

qualcommsd662Match-

qualcommsd665Match-

qualcommsd675Match-

qualcommsd6905gMatch-

qualcommsd720gMatch-

qualcommsd730Match-

qualcommsd750gMatch-

qualcommsd765Match-

qualcommsd765gMatch-

qualcommsd768gMatch-

qualcommsd820Match-

qualcommsd821Match-

qualcommsd835Match-

qualcommsd845Match-

qualcommsd855Match-

qualcommsd8655gMatch-

qualcommsd8885gMatch-

qualcommsda429wMatch-

qualcommsdm429wMatch-

qualcommsdm630Match-

qualcommsdm830Match-

qualcommsdr051Match-

qualcommsdr052Match-

qualcommsdr425Match-

qualcommsdr660Match-

qualcommsdr660gMatch-

qualcommsdr675Match-

qualcommsdr735Match-

qualcommsdr735gMatch-

qualcommsdr8150Match-

qualcommsdr8250Match-

qualcommsdr845Match-

qualcommsdr865Match-

qualcommsdw2500Match-

qualcommsdx20Match-

qualcommsdx20mMatch-

qualcommsdx50mMatch-

qualcommsdx55Match-

qualcommsdx55mMatch-

qualcommsdxr1Match-

qualcommsdxr25gMatch-

qualcommsm4350Match-

qualcommsm6250Match-

qualcommsm6250pMatch-

qualcommsm7250pMatch-

qualcommsm7350Match-

qualcommsmb1350Match-

qualcommsmb1351Match-

qualcommsmb1354Match-

qualcommsmb1355Match-

qualcommsmb1357Match-

qualcommsmb1358Match-

qualcommsmb1360Match-

qualcommsmb1380Match-

qualcommsmb1381Match-

qualcommsmb1390Match-

qualcommsmb1394Match-

qualcommsmb1395Match-

qualcommsmb1396Match-

qualcommsmb1398Match-

qualcommsmb231Match-

qualcommsmr525Match-

qualcommsmr526Match-

qualcommsmr545Match-

qualcommsmr546Match-

qualcommwcd9326Match-

qualcommwcd9330Match-

qualcommwcd9335Match-

qualcommwcd9340Match-

qualcommwcd9341Match-

qualcommwcd9370Match-

qualcommwcd9371Match-

qualcommwcd9375Match-

qualcommwcd9380Match-

qualcommwcd9385Match-

qualcommwcn3610Match-

qualcommwcn3615Match-

qualcommwcn3620Match-

qualcommwcn3660bMatch-

qualcommwcn3680Match-

qualcommwcn3680bMatch-

qualcommwcn3950Match-

qualcommwcn3980Match-

qualcommwcn3988Match-

qualcommwcn3990Match-

qualcommwcn3991Match-

qualcommwcn3998Match-

qualcommwcn6740Match-

qualcommwcn6750Match-

qualcommwcn6850Match-

qualcommwcn6851Match-

qualcommwcn6856Match-

qualcommwgr7640Match-

qualcommwsa8810Match-

qualcommwsa8815Match-

qualcommwsa8830Match-

qualcommwsa8835Match-

qualcommwtr2955Match-

qualcommwtr2965Match-

qualcommwtr3905Match-

qualcommwtr3925Match-

qualcommwtr3950Match-

qualcommwtr4905Match-

qualcommwtr5975Match-

VendorProductVersionCPE
qualcommapq8009-cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*
qualcommapq8009w-cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*
qualcommapq8017-cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*
qualcommapq8037-cpe:2.3:h:qualcomm:apq8037:-:*:*:*:*:*:*:*
qualcommapq8053-cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
qualcommapq8064au-cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*
qualcommapq8096au-cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommar8031-cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*
qualcommar8151-cpe:2.3:h:qualcomm:ar8151:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	apq8009	-	cpe:2.3:h:qualcomm:apq8009:-:::::::*
qualcomm	apq8009w	-	cpe:2.3:h:qualcomm:apq8009w:-:::::::*
qualcomm	apq8017	-	cpe:2.3:h:qualcomm:apq8017:-:::::::*
qualcomm	apq8037	-	cpe:2.3:h:qualcomm:apq8037:-:::::::*
qualcomm	apq8053	-	cpe:2.3:h:qualcomm:apq8053:-:::::::*
qualcomm	apq8064au	-	cpe:2.3:h:qualcomm:apq8064au:-:::::::*
qualcomm	apq8096au	-	cpe:2.3:h:qualcomm:apq8096au:-:::::::*
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	ar8031	-	cpe:2.3:h:qualcomm:ar8031:-:::::::*
qualcomm	ar8151	-	cpe:2.3:h:qualcomm:ar8151:-:::::::*

Rows per page:

1-10 of 3691

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096AU, AQT1000, AR8031, AR8151, CSRA6620, CSRA6640, FSM10055, FSM10056, MDM9206, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, PM215, PM3003A, PM439, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM855P, PM8909, PM8916, PM8937, PM8940, PM8953, PM8996, PM8998, PMD9607, PMD9655, PME605, PMI632, PMI8937, PMI8952, PMI8994, PMI8996, PMI8998, PMK7350, PMK8001, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM8195AU, PMM855AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMW3100, PMX20, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6175A ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Related for CVE-2020-11216