CVE-2020-11266

EUVD-2020-3620
Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
qualcommar7420_firmware
-
qualcommar9580_firmware
-
qualcommcsr8811_firmware
-
qualcommipq4018_firmware
-
qualcommipq4019_firmware
-
qualcommipq4028_firmware
-
qualcommipq4029_firmware
-
qualcommqca10901_firmware
-
qualcommqca4024_firmware
-
qualcommqca7500_firmware
-
qualcommqca7520_firmware
-
qualcommqca7550_firmware
-
qualcommqca8075_firmware
-
qualcommqca9880_firmware
-
qualcommqca9886_firmware
-
qualcommqca9888_firmware
-
qualcommqca9889_firmware
-
qualcommqca9898_firmware
-
qualcommqca9984_firmware
-
qualcommqca9992_firmware
-
qualcommqca9994_firmware
-
qualcommqcn3018_firmware
-
qualcommqfe1922_firmware
-
qualcommqfe1952_firmware
-
qualcommwcd9340_firmware
-
qualcommwsa8810_firmware
-
𝑥
= Vulnerable software versions
References
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin