← Back

CVE-2020-11254

nvd nist
Published: May 7, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected (121)

Products: Qualcomm: Pm6150a, Pm6150l, Pm6350, Pm660, Pm660l, Pm7250b, Pm8008, Pm8009, Pm8350, Pm8350b, Pm8350bh, Pm8350c, Pmk8003, Pmk8350, Pmm6155au, Pmm8155au, Pmm8195au, Pmr735a, Pmr735b, Qat3516, Qat3518, Qat3519, Qat3555, Qat5515, Qat5516, Qat5522, Qat5568, Qbt1500, Qca6574au, Qca6696, Qdm3301, Qdm4643, Qdm4650, Qdm5620, Qdm5621, Qdm5670, Qdm5671, Qet5100, Qet5100m, Qet6100, Qet6105, Qet6110, Qfs2530, Qfs2580, Qfs2608, Qfs2630, Qln4642, Qln4650, Qln5020, Qln5030, Qln5040, Qpa2625, Qpa5461, Qpa5580, Qpa5581, Qpa8801, Qpa8802, Qpa8803, Qpa8821, Qpa8842, Qpm4621, Qpm4630, Qpm4640, Qpm4641, Qpm4650, Qpm5621, Qpm5641, Qpm5670, Qpm5677, Qpm5679, Qpm5870, Qpm5875, Qpm6585, Qpm6621, Qpm6670, Qpm8820, Qpm8870, Qtc800h, Qtc800s, Qtc801s, Qtm525, Sa6145p, Sa6150p, Sa6155p, Sa8150p, Sa8155p, Sa8195p, Sd480, Sd670, Sd710, Sd888, Sd888 5g, Sdr660, Sdr660g, Sdr735, Sdr735g, Sdr865, Sdxr1, Smb1351, Smb1355, Smb1396, Smb1398, Smr526, Smr545, Smr546, Wcd9326, Wcd9341, Wcd9370, Wcd9375, Wcd9380, Wcd9385, Wcn3980, Wcn3988, Wcn3990, Wcn3991, Wcn6850, Wcn6851, Wcn6855, Wcn6856, Wsa8830, Wsa8835
Qualcomm
121 products
Pm6150a
Pm6150l
Pm6350
Pm660
Pm660l
Pm7250b
Pm8008
Pm8009
Pm8350
Pm8350b
Pm8350bh
Pm8350c
Pmk8003
Pmk8350
Pmm6155au
Pmm8155au
Pmm8195au
Pmr735a
Pmr735b
Qat3516
Qat3518
Qat3519
Qat3555
Qat5515
Qat5516
Qat5522
Qat5568
Qbt1500
Qca6574au
Qca6696
Qdm3301
Qdm4643
Qdm4650
Qdm5620
Qdm5621
Qdm5670
Qdm5671
Qet5100
Qet5100m
Qet6100
Qet6105
Qet6110
Qfs2530
Qfs2580
Qfs2608
Qfs2630
Qln4642
Qln4650
Qln5020
Qln5030
Qln5040
Qpa2625
Qpa5461
Qpa5580
Qpa5581
Qpa8801
Qpa8802
Qpa8803
Qpa8821
Qpa8842
Qpm4621
Qpm4630
Qpm4640
Qpm4641
Qpm4650
Qpm5621
Qpm5641
Qpm5670
Qpm5677
Qpm5679
Qpm5870
Qpm5875
Qpm6585
Qpm6621
Qpm6670
Qpm8820
Qpm8870
Qtc800h
Qtc800s
Qtc801s
Qtm525
Sa6145p
Sa6150p
Sa6155p
Sa8150p
Sa8155p
Sa8195p
Sd480
Sd670
Sd710
Sd888
Sd888 5g
Sdr660
Sdr660g
Sdr735
Sdr735g
Sdr865
Sdxr1
Smb1351
Smb1355
Smb1396
Smb1398
Smr526
Smr545
Smr546
Wcd9326
Wcd9341
Wcd9370
Wcd9375
Wcd9380
Wcd9385
Wcn3980
Wcn3988
Wcn3990
Wcn3991
Wcn6850
Wcn6851
Wcn6855
Wcn6856
Wsa8830
Wsa8835
Configuration A
121 vulnerable
Vulnerable SoftwareAffected Versions
Pm6150a
All versions
Pm6150l
All versions
Pm6350
All versions
Pm660
All versions
Pm660l
All versions
Pm7250b
All versions
Pm8008
All versions
Pm8009
All versions
Pm8350
All versions
Pm8350b
All versions
Pm8350bh
All versions
Pm8350c
All versions
Pmk8003
All versions
Pmk8350
All versions
Pmm6155au
All versions
Pmm8155au
All versions
Pmm8195au
All versions
Pmr735a
All versions
Pmr735b
All versions
Qat3516
All versions
Qat3518
All versions
Qat3519
All versions
Qat3555
All versions
Qat5515
All versions
Qat5516
All versions
Qat5522
All versions
Qat5568
All versions
Qbt1500
All versions
Qca6574au
All versions
Qca6696
All versions
Qdm3301
All versions
Qdm4643
All versions
Qdm4650
All versions
Qdm5620
All versions
Qdm5621
All versions
Qdm5670
All versions
Qdm5671
All versions
Qet5100
All versions
Qet5100m
All versions
Qet6100
All versions
Qet6105
All versions
Qet6110
All versions
Qfs2530
All versions
Qfs2580
All versions
Qfs2608
All versions
Qfs2630
All versions
Qln4642
All versions
Qln4650
All versions
Qln5020
All versions
Qln5030
All versions
Qln5040
All versions
Qpa2625
All versions
Qpa5461
All versions
Qpa5580
All versions
Qpa5581
All versions
Qpa8801
All versions
Qpa8802
All versions
Qpa8803
All versions
Qpa8821
All versions
Qpa8842
All versions
Qpm4621
All versions
Qpm4630
All versions
Qpm4640
All versions
Qpm4641
All versions
Qpm4650
All versions
Qpm5621
All versions
Qpm5641
All versions
Qpm5670
All versions
Qpm5677
All versions
Qpm5679
All versions
Qpm5870
All versions
Qpm5875
All versions
Qpm6585
All versions
Qpm6621
All versions
Qpm6670
All versions
Qpm8820
All versions
Qpm8870
All versions
Qtc800h
All versions
Qtc800s
All versions
Qtc801s
All versions
Qtm525
All versions
Sa6145p
All versions
Sa6150p
All versions
Sa6155p
All versions
Sa8150p
All versions
Sa8155p
All versions
Sa8195p
All versions
Sd480
All versions
Sd670
All versions
Sd710
All versions
Sd888
All versions
Sd888 5g
All versions
Sdr660
All versions
Sdr660g
All versions
Sdr735
All versions
Sdr735g
All versions
Sdr865
All versions
Sdxr1
All versions
Smb1351
All versions
Smb1355
All versions
Smb1396
All versions
Smb1398
All versions
Smr526
All versions
Smr545
All versions
Smr546
All versions
Wcd9326
All versions
Wcd9341
All versions
Wcd9370
All versions
Wcd9375
All versions
Wcd9380
All versions
Wcd9385
All versions
Wcn3980
All versions
Wcn3988
All versions
Wcn3990
All versions
Wcn3991
All versions
Wcn6850
All versions
Wcn6851
All versions
Wcn6855
All versions
Wcn6856
All versions
Wsa8830
All versions
Wsa8835
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

Source: product-security@qualcomm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.