← Back

CVE-2020-11286

nvd nist
Published: Feb 22, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected (135)

Products: Qualcomm: Apq8009, Apq8009w, Apq8017, Apq8053, Apq8064au, Apq8076, Apq8096au, Ar8151, Csr6030, Mdm9206, Mdm9230, Mdm9250, Mdm9330, Mdm9607, Mdm9626, Mdm9628, Mdm9630, Mdm9640, Mdm9650, Mdm9655, Msm8909w, Msm8937, Msm8996au, Pm660, Pm660a, Pm660l, Pm8004, Pm8005, Pm8909, Pm8916, Pm8937, Pm8952, Pm8953, Pm8956, Pm8996, Pm8998, Pmd9607, Pmd9635, Pmd9645, Pmd9655, Pmi8937, Pmi8952, Pmi8994, Pmi8996, Pmi8998, Pmk8001, Pmm8996au, Pmx20, Qat3514, Qat3522, Qat3550, Qbt1000, Qbt1500, Qca6174, Qca6174a, Qca6310, Qca6320, Qca6564a, Qca6564au, Qca6574, Qca6574a, Qca6574au, Qca6584, Qca6584au, Qca9367, Qca9377, Qet4100, Qet4101, Qet4200aq, Qfe1035, Qfe1040, Qfe1045, Qfe2340, Qfe2550, Qfe3100, Qfe3320, Qfe3335, Qfe3345, Qln1021aq, Qln1030, Qln1031, Qln1036aq, Qpa4340, Qpa4360, Qpa5460, Qsw8573, Qtc800h, Qtc800s, Qtc800t, Rgr7640au, Rsw8577, Sd205, Sd210, Sd660, Sd820, Sd821, Sd835, Sd 636, Sdm630, Sdr660, Sdw2500, Sdw3100, Sdx20, Sdx20m, Smb1350, Smb1351, Smb1357, Smb1358, Smb1360, Smb1380, Smb231, Smb358s, Wcd9306, Wcd9326, Wcd9330, Wcd9335, Wcd9340, Wcd9341, Wcn3610, Wcn3615, Wcn3620, Wcn3660b, Wcn3680b, Wcn3980, Wcn3990, Wgr7640, Wsa8810, Wsa8815, Wtr2955, Wtr2965, Wtr3905, Wtr3925, Wtr3950, Wtr4905, Wtr5975
Qualcomm
135 products
Apq8009
Apq8009w
Apq8017
Apq8053
Apq8064au
Apq8076
Apq8096au
Ar8151
Csr6030
Mdm9206
Mdm9230
Mdm9250
Mdm9330
Mdm9607
Mdm9626
Mdm9628
Mdm9630
Mdm9640
Mdm9650
Mdm9655
Msm8909w
Msm8937
Msm8996au
Pm660
Pm660a
Pm660l
Pm8004
Pm8005
Pm8909
Pm8916
Pm8937
Pm8952
Pm8953
Pm8956
Pm8996
Pm8998
Pmd9607
Pmd9635
Pmd9645
Pmd9655
Pmi8937
Pmi8952
Pmi8994
Pmi8996
Pmi8998
Pmk8001
Pmm8996au
Pmx20
Qat3514
Qat3522
Qat3550
Qbt1000
Qbt1500
Qca6174
Qca6174a
Qca6310
Qca6320
Qca6564a
Qca6564au
Qca6574
Qca6574a
Qca6574au
Qca6584
Qca6584au
Qca9367
Qca9377
Qet4100
Qet4101
Qet4200aq
Qfe1035
Qfe1040
Qfe1045
Qfe2340
Qfe2550
Qfe3100
Qfe3320
Qfe3335
Qfe3345
Qln1021aq
Qln1030
Qln1031
Qln1036aq
Qpa4340
Qpa4360
Qpa5460
Qsw8573
Qtc800h
Qtc800s
Qtc800t
Rgr7640au
Rsw8577
Sd205
Sd210
Sd660
Sd820
Sd821
Sd835
Sd 636
Sdm630
Sdr660
Sdw2500
Sdw3100
Sdx20
Sdx20m
Smb1350
Smb1351
Smb1357
Smb1358
Smb1360
Smb1380
Smb231
Smb358s
Wcd9306
Wcd9326
Wcd9330
Wcd9335
Wcd9340
Wcd9341
Wcn3610
Wcn3615
Wcn3620
Wcn3660b
Wcn3680b
Wcn3980
Wcn3990
Wgr7640
Wsa8810
Wsa8815
Wtr2955
Wtr2965
Wtr3905
Wtr3925
Wtr3950
Wtr4905
Wtr5975
Configuration A
135 vulnerable
Vulnerable SoftwareAffected Versions
Apq8009
All versions
Apq8009w
All versions
Apq8017
All versions
Apq8053
All versions
Apq8064au
All versions
Apq8076
All versions
Apq8096au
All versions
Ar8151
All versions
Csr6030
All versions
Mdm9206
All versions
Mdm9230
All versions
Mdm9250
All versions
Mdm9330
All versions
Mdm9607
All versions
Mdm9626
All versions
Mdm9628
All versions
Mdm9630
All versions
Mdm9640
All versions
Mdm9650
All versions
Mdm9655
All versions
Msm8909w
All versions
Msm8937
All versions
Msm8996au
All versions
Pm660
All versions
Pm660a
All versions
Pm660l
All versions
Pm8004
All versions
Pm8005
All versions
Pm8909
All versions
Pm8916
All versions
Pm8937
All versions
Pm8952
All versions
Pm8953
All versions
Pm8956
All versions
Pm8996
All versions
Pm8998
All versions
Pmd9607
All versions
Pmd9635
All versions
Pmd9645
All versions
Pmd9655
All versions
Pmi8937
All versions
Pmi8952
All versions
Pmi8994
All versions
Pmi8996
All versions
Pmi8998
All versions
Pmk8001
All versions
Pmm8996au
All versions
Pmx20
All versions
Qat3514
All versions
Qat3522
All versions
Qat3550
All versions
Qbt1000
All versions
Qbt1500
All versions
Qca6174
All versions
Qca6174a
All versions
Qca6310
All versions
Qca6320
All versions
Qca6564a
All versions
Qca6564au
All versions
Qca6574
All versions
Qca6574a
All versions
Qca6574au
All versions
Qca6584
All versions
Qca6584au
All versions
Qca9367
All versions
Qca9377
All versions
Qet4100
All versions
Qet4101
All versions
Qet4200aq
All versions
Qfe1035
All versions
Qfe1040
All versions
Qfe1045
All versions
Qfe2340
All versions
Qfe2550
All versions
Qfe3100
All versions
Qfe3320
All versions
Qfe3335
All versions
Qfe3345
All versions
Qln1021aq
All versions
Qln1030
All versions
Qln1031
All versions
Qln1036aq
All versions
Qpa4340
All versions
Qpa4360
All versions
Qpa5460
All versions
Qsw8573
All versions
Qtc800h
All versions
Qtc800s
All versions
Qtc800t
All versions
Rgr7640au
All versions
Rsw8577
All versions
Sd205
All versions
Sd210
All versions
Sd660
All versions
Sd820
All versions
Sd821
All versions
Sd835
All versions
Sd 636
All versions
Sdm630
All versions
Sdr660
All versions
Sdw2500
All versions
Sdw3100
All versions
Sdx20
All versions
Sdx20m
All versions
Smb1350
All versions
Smb1351
All versions
Smb1357
All versions
Smb1358
All versions
Smb1360
All versions
Smb1380
All versions
Smb231
All versions
Smb358s
All versions
Wcd9306
All versions
Wcd9326
All versions
Wcd9330
All versions
Wcd9335
All versions
Wcd9340
All versions
Wcd9341
All versions
Wcn3610
All versions
Wcn3615
All versions
Wcn3620
All versions
Wcn3660b
All versions
Wcn3680b
All versions
Wcn3980
All versions
Wcn3990
All versions
Wgr7640
All versions
Wsa8810
All versions
Wsa8815
All versions
Wtr2955
All versions
Wtr2965
All versions
Wtr3905
All versions
Wtr3925
All versions
Wtr3950
All versions
Wtr4905
All versions
Wtr5975
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: product-security@qualcomm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.