Lucene search

QualcommCVE-2020-11237

HistoryApr 07, 2021 - 8:15 a.m.

CVE-2020-11237

2021-04-0708:15:14

CWE-20

qualcomm

web.nvd.nist.gov

199

cve-2020-11237

memory crash

histogram

kpi

snapdragon auto

snapdragon compute

snapdragon connectivity

snapdragon mobile

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected configurations

Nvd

Node

qualcommcsrb31024_firmwareMatch-

AND

qualcommcsrb31024Match-

Node

qualcommpm3003a_firmwareMatch-

AND

qualcommpm3003aMatch-

Node

qualcommpm456_firmwareMatch-

AND

qualcommpm456Match-

Node

qualcommpm6150_firmwareMatch-

AND

qualcommpm6150Match-

Node

qualcommpm6150a_firmwareMatch-

AND

qualcommpm6150aMatch-

Node

qualcommpm6150l_firmwareMatch-

AND

qualcommpm6150lMatch-

Node

qualcommpm6250_firmwareMatch-

AND

qualcommpm6250Match-

Node

qualcommpm6350_firmwareMatch-

AND

qualcommpm6350Match-

Node

qualcommpm7150a_firmwareMatch-

AND

qualcommpm7150aMatch-

Node

qualcommpm7150l_firmwareMatch-

AND

qualcommpm7150lMatch-

Node

qualcommpm7250_firmwareMatch-

AND

qualcommpm7250Match-

Node

qualcommpm7250b_firmwareMatch-

AND

qualcommpm7250bMatch-

Node

qualcommpm8008_firmwareMatch-

AND

qualcommpm8008Match-

Node

qualcommpm8009_firmwareMatch-

AND

qualcommpm8009Match-

Node

qualcommpm8150a_firmwareMatch-

AND

qualcommpm8150aMatch-

Node

qualcommpm8150b_firmwareMatch-

AND

qualcommpm8150bMatch-

Node

qualcommpm8150c_firmwareMatch-

AND

qualcommpm8150cMatch-

Node

qualcommpm8150l_firmwareMatch-

AND

qualcommpm8150lMatch-

Node

qualcommpm8250_firmwareMatch-

AND

qualcommpm8250Match-

Node

qualcommpm855_firmwareMatch-

AND

qualcommpm855Match-

Node

qualcommpm855b_firmwareMatch-

AND

qualcommpm855bMatch-

Node

qualcommpm855l_firmwareMatch-

AND

qualcommpm855lMatch-

Node

qualcommpmi632_firmwareMatch-

AND

qualcommpmi632Match-

Node

qualcommpmk8002_firmwareMatch-

AND

qualcommpmk8002Match-

Node

qualcommpmk8003_firmwareMatch-

AND

qualcommpmk8003Match-

Node

qualcommpmr525_firmwareMatch-

AND

qualcommpmr525Match-

Node

qualcommpmr735a_firmwareMatch-

AND

qualcommpmr735aMatch-

Node

qualcommpmr735b_firmwareMatch-

AND

qualcommpmr735bMatch-

Node

qualcommpmx24_firmwareMatch-

AND

qualcommpmx24Match-

Node

qualcommpmx55_firmwareMatch-

AND

qualcommpmx55Match-

Node

qualcommqat3516_firmwareMatch-

AND

qualcommqat3516Match-

Node

qualcommqat3518_firmwareMatch-

AND

qualcommqat3518Match-

Node

qualcommqat3519_firmwareMatch-

AND

qualcommqat3519Match-

Node

qualcommqat3555_firmwareMatch-

AND

qualcommqat3555Match-

Node

qualcommqat5515_firmwareMatch-

AND

qualcommqat5515Match-

Node

qualcommqat5516_firmwareMatch-

AND

qualcommqat5516Match-

Node

qualcommqat5522_firmwareMatch-

AND

qualcommqat5522Match-

Node

qualcommqat5533_firmwareMatch-

AND

qualcommqat5533Match-

Node

qualcommqbt1500_firmwareMatch-

AND

qualcommqbt1500Match-

Node

qualcommqbt2000_firmwareMatch-

AND

qualcommqbt2000Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6421_firmwareMatch-

AND

qualcommqca6421Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6431_firmwareMatch-

AND

qualcommqca6431Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6564au_firmwareMatch-

AND

qualcommqca6564auMatch-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6584au_firmwareMatch-

AND

qualcommqca6584auMatch-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqdm2301_firmwareMatch-

AND

qualcommqdm2301Match-

Node

qualcommqdm2305_firmwareMatch-

AND

qualcommqdm2305Match-

Node

qualcommqdm2307_firmwareMatch-

AND

qualcommqdm2307Match-

Node

qualcommqdm2308_firmwareMatch-

AND

qualcommqdm2308Match-

Node

qualcommqdm2310_firmwareMatch-

AND

qualcommqdm2310Match-

Node

qualcommqdm3301_firmwareMatch-

AND

qualcommqdm3301Match-

Node

qualcommqdm5620_firmwareMatch-

AND

qualcommqdm5620Match-

Node

qualcommqdm5621_firmwareMatch-

AND

qualcommqdm5621Match-

Node

qualcommqdm5650_firmwareMatch-

AND

qualcommqdm5650Match-

Node

qualcommqdm5652_firmwareMatch-

AND

qualcommqdm5652Match-

Node

qualcommqdm5670_firmwareMatch-

AND

qualcommqdm5670Match-

Node

qualcommqdm5671_firmwareMatch-

AND

qualcommqdm5671Match-

Node

qualcommqdm5677_firmwareMatch-

AND

qualcommqdm5677Match-

Node

qualcommqdm5679_firmwareMatch-

AND

qualcommqdm5679Match-

Node

qualcommqet4100_firmwareMatch-

AND

qualcommqet4100Match-

Node

qualcommqet4101_firmwareMatch-

AND

qualcommqet4101Match-

Node

qualcommqet5100_firmwareMatch-

AND

qualcommqet5100Match-

Node

qualcommqet6100_firmwareMatch-

AND

qualcommqet6100Match-

Node

qualcommqet6110_firmwareMatch-

AND

qualcommqet6110Match-

Node

qualcommqfs2530_firmwareMatch-

AND

qualcommqfs2530Match-

Node

qualcommqfs2580_firmwareMatch-

AND

qualcommqfs2580Match-

Node

qualcommqln1021aq_firmwareMatch-

AND

qualcommqln1021aqMatch-

Node

qualcommqln1031_firmwareMatch-

AND

qualcommqln1031Match-

Node

qualcommqln1036aq_firmwareMatch-

AND

qualcommqln1036aqMatch-

Node

qualcommqln4640_firmwareMatch-

AND

qualcommqln4640Match-

Node

qualcommqln4642_firmwareMatch-

AND

qualcommqln4642Match-

Node

qualcommqln4650_firmwareMatch-

AND

qualcommqln4650Match-

Node

qualcommqln5020_firmwareMatch-

AND

qualcommqln5020Match-

Node

qualcommqln5030_firmwareMatch-

AND

qualcommqln5030Match-

Node

qualcommqln5040_firmwareMatch-

AND

qualcommqln5040Match-

Node

qualcommqpa2625_firmwareMatch-

AND

qualcommqpa2625Match-

Node

qualcommqpa5580_firmwareMatch-

AND

qualcommqpa5580Match-

Node

qualcommqpa5581_firmwareMatch-

AND

qualcommqpa5581Match-

Node

qualcommqpa6560_firmwareMatch-

AND

qualcommqpa6560Match-

Node

qualcommqpa8673_firmwareMatch-

AND

qualcommqpa8673Match-

Node

qualcommqpa8675_firmwareMatch-

AND

qualcommqpa8675Match-

Node

qualcommqpa8686_firmwareMatch-

AND

qualcommqpa8686Match-

Node

qualcommqpa8801_firmwareMatch-

AND

qualcommqpa8801Match-

Node

qualcommqpa8802_firmwareMatch-

AND

qualcommqpa8802Match-

Node

qualcommqpa8803_firmwareMatch-

AND

qualcommqpa8803Match-

Node

qualcommqpa8821_firmwareMatch-

AND

qualcommqpa8821Match-

Node

qualcommqpa8842_firmwareMatch-

AND

qualcommqpa8842Match-

Node

qualcommqpm4650_firmwareMatch-

AND

qualcommqpm4650Match-

Node

qualcommqpm5620_firmwareMatch-

AND

qualcommqpm5620Match-

Node

qualcommqpm5621_firmwareMatch-

AND

qualcommqpm5621Match-

Node

qualcommqpm5657_firmwareMatch-

AND

qualcommqpm5657Match-

Node

qualcommqpm5658_firmwareMatch-

AND

qualcommqpm5658Match-

Node

qualcommqpm5670_firmwareMatch-

AND

qualcommqpm5670Match-

Node

qualcommqpm5677_firmwareMatch-

AND

qualcommqpm5677Match-

Node

qualcommqpm5679_firmwareMatch-

AND

qualcommqpm5679Match-

Node

qualcommqpm6582_firmwareMatch-

AND

qualcommqpm6582Match-

Node

qualcommqpm6585_firmwareMatch-

AND

qualcommqpm6585Match-

Node

qualcommqpm8820_firmwareMatch-

AND

qualcommqpm8820Match-

Node

qualcommqpm8830_firmwareMatch-

AND

qualcommqpm8830Match-

Node

qualcommqpm8870_firmwareMatch-

AND

qualcommqpm8870Match-

Node

qualcommqpm8895_firmwareMatch-

AND

qualcommqpm8895Match-

Node

qualcommqsm7250_firmwareMatch-

AND

qualcommqsm7250Match-

Node

qualcommqtc800h_firmwareMatch-

AND

qualcommqtc800hMatch-

Node

qualcommqtc801s_firmwareMatch-

AND

qualcommqtc801sMatch-

Node

qualcommqtm525_firmwareMatch-

AND

qualcommqtm525Match-

Node

qualcommqtm527_firmwareMatch-

AND

qualcommqtm527Match-

Node

qualcommsa415m_firmwareMatch-

AND

qualcommsa415mMatch-

Node

qualcommsd675_firmwareMatch-

AND

qualcommsd675Match-

Node

qualcommsd480_firmwareMatch-

AND

qualcommsd480Match-

Node

qualcommsd675_firmwareMatch-

AND

qualcommsd675Match-

Node

qualcommsd678_firmwareMatch-

AND

qualcommsd678Match-

Node

qualcommsd6905g_firmwareMatch-

AND

qualcommsd6905gMatch-

Node

qualcommsd720g_firmwareMatch-

AND

qualcommsd720gMatch-

Node

qualcommsd730_firmwareMatch-

AND

qualcommsd730Match-

Node

qualcommsd750g_firmwareMatch-

AND

qualcommsd750gMatch-

Node

qualcommsd765_firmwareMatch-

AND

qualcommsd765Match-

Node

qualcommsd765g_firmwareMatch-

AND

qualcommsd765gMatch-

Node

qualcommsd768g_firmwareMatch-

AND

qualcommsd768gMatch-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd8655g_firmwareMatch-

AND

qualcommsd8655gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsdr660_firmwareMatch-

AND

qualcommsdr660Match-

Node

qualcommsdr675_firmwareMatch-

AND

qualcommsdr675Match-

Node

qualcommsdr735_firmwareMatch-

AND

qualcommsdr735Match-

Node

qualcommsdr735g_firmwareMatch-

AND

qualcommsdr735gMatch-

Node

qualcommsdr8150_firmwareMatch-

AND

qualcommsdr8150Match-

Node

qualcommsdr8250_firmwareMatch-

AND

qualcommsdr8250Match-

Node

qualcommsdr865_firmwareMatch-

AND

qualcommsdr865Match-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr25g_firmwareMatch-

AND

qualcommsdxr25gMatch-

Node

qualcommsm6250_firmwareMatch-

AND

qualcommsm6250Match-

Node

qualcommsm6250p_firmwareMatch-

AND

qualcommsm6250pMatch-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcommsmb1355_firmwareMatch-

AND

qualcommsmb1355Match-

Node

qualcommsmb1381_firmwareMatch-

AND

qualcommsmb1381Match-

Node

qualcommsmb1390_firmwareMatch-

AND

qualcommsmb1390Match-

Node

qualcommsmb1395Match-

AND

qualcommsmb1395_firmwareMatch-

Node

qualcommsmb1396Match-

AND

qualcommsmb1396_firmwareMatch-

Node

qualcommsmr525Match-

AND

qualcommsmr525_firmwareMatch-

Node

qualcommsmr526Match-

AND

qualcommsmr526_firmwareMatch-

Node

qualcommwcd9341Match-

AND

qualcommwcd9341_firmwareMatch-

Node

qualcommwcd9370Match-

AND

qualcommwcd9370_firmwareMatch-

Node

qualcommwcd9375Match-

AND

qualcommwcd9375_firmwareMatch-

Node

qualcommwcd9380Match-

AND

qualcommwcd9380_firmwareMatch-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommcsrb31024_firmware-cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
qualcommcsrb31024-cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*
qualcommpm3003a_firmware-cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*
qualcommpm3003a-cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
qualcommpm456_firmware-cpe:2.3:o:qualcomm:pm456_firmware:-:*:*:*:*:*:*:*
qualcommpm456-cpe:2.3:h:qualcomm:pm456:-:*:*:*:*:*:*:*
qualcommpm6150_firmware-cpe:2.3:o:qualcomm:pm6150_firmware:-:*:*:*:*:*:*:*
qualcommpm6150-cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*
qualcommpm6150a_firmware-cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*
qualcommpm6150a-cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	csrb31024_firmware	-	cpe:2.3:o:qualcomm:csrb31024_firmware:-:::::::*
qualcomm	csrb31024	-	cpe:2.3:h:qualcomm:csrb31024:-:::::::*
qualcomm	pm3003a_firmware	-	cpe:2.3:o:qualcomm:pm3003a_firmware:-:::::::*
qualcomm	pm3003a	-	cpe:2.3:h:qualcomm:pm3003a:-:::::::*
qualcomm	pm456_firmware	-	cpe:2.3:o:qualcomm:pm456_firmware:-:::::::*
qualcomm	pm456	-	cpe:2.3:h:qualcomm:pm456:-:::::::*
qualcomm	pm6150_firmware	-	cpe:2.3:o:qualcomm:pm6150_firmware:-:::::::*
qualcomm	pm6150	-	cpe:2.3:h:qualcomm:pm6150:-:::::::*
qualcomm	pm6150a_firmware	-	cpe:2.3:o:qualcomm:pm6150a_firmware:-:::::::*
qualcomm	pm6150a	-	cpe:2.3:h:qualcomm:pm6150a:-:::::::*

Rows per page:

1-10 of 3301

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "CSRB31024, PM3003A, PM456, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM7150A, PM7150L, PM7250, PM7250B, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855B, PM855L, PMI632, PMK8002, PMK8003, PMR525, PMR735A, PMR735B, PMX24, PMX55, QAT3516, QAT3518, QAT3519, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QBT1500, QBT2000, QCA6390, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QDM2301, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET6100, QET6110, QFS2530, QFS2580, QLN1021AQ, QLN1031, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4650, QPM5620, QPM5621, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM6582, QPM6585, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QTC800H, QTC801S, QTM5 ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-11237