CVE-2020-11132

EUVD-2020-3486
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
qualcommapq8009_firmware
-
qualcommapq8096au_firmware
-
qualcommapq8098_firmware
-
qualcommmdm8207_firmware
-
qualcommmdm9150_firmware
-
qualcommmdm9205_firmware
-
qualcommmdm9206_firmware
-
qualcommmdm9207_firmware
-
qualcommmdm9250_firmware
-
qualcommmdm9607_firmware
-
qualcommmdm9628_firmware
-
qualcommmdm9650_firmware
-
qualcommmsm8108_firmware
-
qualcommmsm8208_firmware
-
qualcommmsm8209_firmware
-
qualcommmsm8608_firmware
-
qualcommmsm8905_firmware
-
qualcommmsm8909_firmware
-
qualcommmsm8998_firmware
-
qualcommqcm4290_firmware
-
qualcommqcs405_firmware
-
qualcommqcs410_firmware
-
qualcommqcs4290_firmware
-
qualcommqcs603_firmware
-
qualcommqcs605_firmware
-
qualcommqcs610_firmware
-
qualcommqsm8250_firmware
-
qualcommsa415m_firmware
-
qualcommsa515m_firmware
-
qualcommsa6145p_firmware
-
qualcommsa6150p_firmware
-
qualcommsa6155_firmware
-
qualcommsa6155p_firmware
-
qualcommsa8150p_firmware
-
qualcommsa8155_firmware
-
qualcommsa8155p_firmware
-
qualcommsa8195p_firmware
-
qualcommsc7180_firmware
-
qualcommsc8180x_firmware
-
qualcommsc8180x_firmware
-
qualcommsdx55_firmware
-
qualcommsc8180xp_firmware
-
qualcommsda640_firmware
-
qualcommsda670_firmware
-
qualcommsda845_firmware
-
qualcommsda855_firmware
-
qualcommsdm1000_firmware
-
qualcommsdm640_firmware
-
qualcommsdm670_firmware
-
qualcommsdm710_firmware
-
qualcommsdm712_firmware
-
qualcommsdm830_firmware
-
qualcommsdm845_firmware
-
qualcommsdm850_firmware
-
qualcommsdx24_firmware
-
qualcommsdx50m_firmware
-
qualcommsdx55_firmware
-
qualcommsdx55m_firmware
-
qualcommsm4125_firmware
-
qualcommsm4250_firmware
-
qualcommsm4250p_firmware
-
qualcommsm6115_firmware
-
qualcommsm6115p_firmware
-
qualcommsm6125_firmware
-
qualcommsm6150_firmware
-
qualcommsm6150p_firmware
-
qualcommsm6250_firmware
-
qualcommsm6250p_firmware
-
qualcommsm6350_firmware
-
qualcommsm7125_firmware
-
qualcommsm7150_firmware
-
qualcommsm7150p_firmware
-
qualcommsm7225_firmware
-
qualcommsm7250_firmware
-
qualcommsm7250p_firmware
-
qualcommsm8150_firmware
-
qualcommsm8150p_firmware
-
qualcommsm8250_firmware
-
qualcommsxr1120_firmware
-
qualcommsxr1130_firmware
-
qualcommsxr2130_firmware
-
qualcommsxr2130p_firmware
-
qualcommwcd9330_firmware
-
𝑥
= Vulnerable software versions