Lucene search

K
cveQualcommCVE-2020-11146
HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11146

2021-01-2110:15:13
CWE-129
qualcomm
web.nvd.nist.gov
30
1
cve-2020-11146
out of bound write
ioctl
snapdragon auto
snapdragon compute
snapdragon connectivity
snapdragon consumer iot
snapdragon industrial iot
snapdragon mobile
snapdragon voice & music
snapdragon wearables
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

12.6%

Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

Nvd
Node
qualcommapq8076Match-
OR
qualcommaqt1000Match-
OR
qualcommar8031Match-
OR
qualcommar8035Match-
OR
qualcommcsra6620Match-
OR
qualcommcsra6640Match-
OR
qualcommmsm8937Match-
OR
qualcommpm215Match-
OR
qualcommpm3003aMatch-
OR
qualcommpm4125Match-
OR
qualcommpm456Match-
OR
qualcommpm6125Match-
OR
qualcommpm6150Match-
OR
qualcommpm6150aMatch-
OR
qualcommpm6150lMatch-
OR
qualcommpm6250Match-
OR
qualcommpm6350Match-
OR
qualcommpm640aMatch-
OR
qualcommpm640lMatch-
OR
qualcommpm640pMatch-
OR
qualcommpm660Match-
OR
qualcommpm660lMatch-
OR
qualcommpm670Match-
OR
qualcommpm670lMatch-
OR
qualcommpm7150aMatch-
OR
qualcommpm7150lMatch-
OR
qualcommpm7250Match-
OR
qualcommpm7250bMatch-
OR
qualcommpm7350cMatch-
OR
qualcommpm8004Match-
OR
qualcommpm8005Match-
OR
qualcommpm8008Match-
OR
qualcommpm8009Match-
OR
qualcommpm8150Match-
OR
qualcommpm8150aMatch-
OR
qualcommpm8150bMatch-
OR
qualcommpm8150cMatch-
OR
qualcommpm8150lMatch-
OR
qualcommpm8250Match-
OR
qualcommpm8350Match-
OR
qualcommpm8350bMatch-
OR
qualcommpm8350bhMatch-
OR
qualcommpm8350bhsMatch-
OR
qualcommpm8350cMatch-
OR
qualcommpm855Match-
OR
qualcommpm855bMatch-
OR
qualcommpm855lMatch-
OR
qualcommpm855pMatch-
OR
qualcommpm8909Match-
OR
qualcommpm8916Match-
OR
qualcommpm8937Match-
OR
qualcommpm8952Match-
OR
qualcommpm8956Match-
OR
qualcommpm8998Match-
OR
qualcommpmc1000hMatch-
OR
qualcommpmd9655Match-
OR
qualcommpmi632Match-
OR
qualcommpmi8937Match-
OR
qualcommpmi8952Match-
OR
qualcommpmi8998Match-
OR
qualcommpmk7350Match-
OR
qualcommpmk8002Match-
OR
qualcommpmk8003Match-
OR
qualcommpmk8350Match-
OR
qualcommpmm6155auMatch-
OR
qualcommpmm8155auMatch-
OR
qualcommpmm8195auMatch-
OR
qualcommpmm855auMatch-
OR
qualcommpmr525Match-
OR
qualcommpmr735aMatch-
OR
qualcommpmr735bMatch-
OR
qualcommpmw3100Match-
OR
qualcommpmx55Match-
OR
qualcommqat3514Match-
OR
qualcommqat3516Match-
OR
qualcommqat3518Match-
OR
qualcommqat3519Match-
OR
qualcommqat3522Match-
OR
qualcommqat3550Match-
OR
qualcommqat3555Match-
OR
qualcommqat5515Match-
OR
qualcommqat5516Match-
OR
qualcommqat5522Match-
OR
qualcommqat5533Match-
OR
qualcommqat5568Match-
OR
qualcommqbt1500Match-
OR
qualcommqbt2000Match-
OR
qualcommqca4020Match-
OR
qualcommqca6174aMatch-
OR
qualcommqca6175aMatch-
OR
qualcommqca6310Match-
OR
qualcommqca6335Match-
OR
qualcommqca6390Match-
OR
qualcommqca6391Match-
OR
qualcommqca6420Match-
OR
qualcommqca6421Match-
OR
qualcommqca6426Match-
OR
qualcommqca6430Match-
OR
qualcommqca6431Match-
OR
qualcommqca6436Match-
OR
qualcommqca6564Match-
OR
qualcommqca6564aMatch-
OR
qualcommqca6564auMatch-
OR
qualcommqca6574Match-
OR
qualcommqca6574aMatch-
OR
qualcommqca6574auMatch-
OR
qualcommqca6584auMatch-
OR
qualcommqca6595Match-
OR
qualcommqca6595auMatch-
OR
qualcommqca6696Match-
OR
qualcommqca8337Match-
OR
qualcommqca9379Match-
OR
qualcommqcm4290Match-
OR
qualcommqcs405Match-
OR
qualcommqcs4290Match-
OR
qualcommqcs605Match-
OR
qualcommqdm2301Match-
OR
qualcommqdm2302Match-
OR
qualcommqdm2305Match-
OR
qualcommqdm2307Match-
OR
qualcommqdm2308Match-
OR
qualcommqdm2310Match-
OR
qualcommqdm3301Match-
OR
qualcommqdm3302Match-
OR
qualcommqdm4643Match-
OR
qualcommqdm4650Match-
OR
qualcommqdm5579Match-
OR
qualcommqdm5620Match-
OR
qualcommqdm5621Match-
OR
qualcommqdm5650Match-
OR
qualcommqdm5652Match-
OR
qualcommqdm5670Match-
OR
qualcommqdm5671Match-
OR
qualcommqdm5677Match-
OR
qualcommqdm5679Match-
OR
qualcommqet4100Match-
OR
qualcommqet4101Match-
OR
qualcommqet4200aqMatch-
OR
qualcommqet5100Match-
OR
qualcommqet5100mMatch-
OR
qualcommqet6100Match-
OR
qualcommqet6110Match-
OR
qualcommqfs2530Match-
OR
qualcommqfs2580Match-
OR
qualcommqfs2608Match-
OR
qualcommqfs2630Match-
OR
qualcommqln1020Match-
OR
qualcommqln1021aqMatch-
OR
qualcommqln1030Match-
OR
qualcommqln1031Match-
OR
qualcommqln1036aqMatch-
OR
qualcommqln4640Match-
OR
qualcommqln4642Match-
OR
qualcommqln4650Match-
OR
qualcommqln5020Match-
OR
qualcommqln5030Match-
OR
qualcommqln5040Match-
OR
qualcommqpa2625Match-
OR
qualcommqpa4360Match-
OR
qualcommqpa4361Match-
OR
qualcommqpa5461Match-
OR
qualcommqpa5580Match-
OR
qualcommqpa5581Match-
OR
qualcommqpa6560Match-
OR
qualcommqpa8673Match-
OR
qualcommqpa8675Match-
OR
qualcommqpa8686Match-
OR
qualcommqpa8801Match-
OR
qualcommqpa8802Match-
OR
qualcommqpa8803Match-
OR
qualcommqpa8821Match-
OR
qualcommqpa8842Match-
OR
qualcommqpm2630Match-
OR
qualcommqpm4621Match-
OR
qualcommqpm4630Match-
OR
qualcommqpm4640Match-
OR
qualcommqpm4641Match-
OR
qualcommqpm4650Match-
OR
qualcommqpm5541Match-
OR
qualcommqpm5577Match-
OR
qualcommqpm5579Match-
OR
qualcommqpm5621Match-
OR
qualcommqpm5641Match-
OR
qualcommqpm5658Match-
OR
qualcommqpm5670Match-
OR
qualcommqpm5677Match-
OR
qualcommqpm5679Match-
OR
qualcommqpm5870Match-
OR
qualcommqpm5875Match-
OR
qualcommqpm6325Match-
OR
qualcommqpm6375Match-
OR
qualcommqpm6582Match-
OR
qualcommqpm6585Match-
OR
qualcommqpm6621Match-
OR
qualcommqpm6670Match-
OR
qualcommqpm8820Match-
OR
qualcommqpm8830Match-
OR
qualcommqpm8870Match-
OR
qualcommqpm8895Match-
OR
qualcommqsm7250Match-
OR
qualcommqsw6310Match-
OR
qualcommqsw8573Match-
OR
qualcommqsw8574Match-
OR
qualcommqtc410sMatch-
OR
qualcommqtc800hMatch-
OR
qualcommqtc800sMatch-
OR
qualcommqtc801sMatch-
OR
qualcommqtm525Match-
OR
qualcommqtm527Match-
OR
qualcommqualcomm215Match-
OR
qualcommsa6145pMatch-
OR
qualcommsa6155Match-
OR
qualcommsa6155pMatch-
OR
qualcommsa8150pMatch-
OR
qualcommsa8155Match-
OR
qualcommsa8155pMatch-
OR
qualcommsa8195pMatch-
OR
qualcommsd205Match-
OR
qualcommsd210Match-
OR
qualcommsd429Match-
OR
qualcommsd460Match-
OR
qualcommsd662Match-
OR
qualcommsd665Match-
OR
qualcommsd670Match-
OR
qualcommsd675Match-
OR
qualcommsd6905gMatch-
OR
qualcommsd710Match-
OR
qualcommsd720gMatch-
OR
qualcommsd730Match-
OR
qualcommsd750gMatch-
OR
qualcommsd765Match-
OR
qualcommsd765gMatch-
OR
qualcommsd768gMatch-
OR
qualcommsd845Match-
OR
qualcommsd855Match-
OR
qualcommsd8655gMatch-
OR
qualcommsd8885gMatch-
OR
qualcommsd8cMatch-
OR
qualcommsd8cxMatch-
OR
qualcommsda429wMatch-
OR
qualcommsdm429wMatch-
OR
qualcommsdr425Match-
OR
qualcommsdr660Match-
OR
qualcommsdr660gMatch-
OR
qualcommsdr675Match-
OR
qualcommsdr735Match-
OR
qualcommsdr735gMatch-
OR
qualcommsdr8150Match-
OR
qualcommsdr8250Match-
OR
qualcommsdr865Match-
OR
qualcommsdx55Match-
OR
qualcommsdx55mMatch-
OR
qualcommsdxr1Match-
OR
qualcommsdxr25gMatch-
OR
qualcommsm4125Match-
OR
qualcommsm6250Match-
OR
qualcommsm6250pMatch-
OR
qualcommsm7250pMatch-
OR
qualcommsm7350Match-
OR
qualcommsmb1351Match-
OR
qualcommsmb1354Match-
OR
qualcommsmb1355Match-
OR
qualcommsmb1380Match-
OR
qualcommsmb1381Match-
OR
qualcommsmb1390Match-
OR
qualcommsmb1394Match-
OR
qualcommsmb1395Match-
OR
qualcommsmb1396Match-
OR
qualcommsmb1398Match-
OR
qualcommsmb2351Match-
OR
qualcommsmr525Match-
OR
qualcommsmr526Match-
OR
qualcommsmr545Match-
OR
qualcommsmr546Match-
OR
qualcommwcd9306Match-
OR
qualcommwcd9326Match-
OR
qualcommwcd9335Match-
OR
qualcommwcd9340Match-
OR
qualcommwcd9341Match-
OR
qualcommwcd9370Match-
OR
qualcommwcd9371Match-
OR
qualcommwcd9375Match-
OR
qualcommwcd9380Match-
OR
qualcommwcd9385Match-
OR
qualcommwcn3610Match-
OR
qualcommwcn3615Match-
OR
qualcommwcn3620Match-
OR
qualcommwcn3660bMatch-
OR
qualcommwcn3680Match-
OR
qualcommwcn3680bMatch-
OR
qualcommwcn3910Match-
OR
qualcommwcn3950Match-
OR
qualcommwcn3980Match-
OR
qualcommwcn3988Match-
OR
qualcommwcn3990Match-
OR
qualcommwcn3991Match-
OR
qualcommwcn3998Match-
OR
qualcommwcn3999Match-
OR
qualcommwcn6740Match-
OR
qualcommwcn6750Match-
OR
qualcommwcn6850Match-
OR
qualcommwcn6851Match-
OR
qualcommwcn6856Match-
OR
qualcommwgr7640Match-
OR
qualcommwsa8810Match-
OR
qualcommwsa8815Match-
OR
qualcommwsa8830Match-
OR
qualcommwsa8835Match-
OR
qualcommwtr2955Match-
OR
qualcommwtr2965Match-
OR
qualcommwtr3925Match-
OR
qualcommwtr4905Match-
OR
qualcommwtr5975Match-
OR
qualcommwtr6955Match-
VendorProductVersionCPE
qualcommapq8076-cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommar8031-cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*
qualcommar8035-cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
qualcommcsra6620-cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*
qualcommcsra6640-cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*
qualcommmsm8937-cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*
qualcommpm215-cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*
qualcommpm3003a-cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
qualcommpm4125-cpe:2.3:h:qualcomm:pm4125:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 3141

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8076, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, MSM8937, PM215, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660L, PM670, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM855P, PM8909, PM8916, PM8937, PM8952, PM8956, PM8998, PMC1000H, PMD9655, PMI632, PMI8937, PMI8952, PMI8998, PMK7350, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMW3100, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6175A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA8337, QCA9379, QCM4290, QCS405, Q ...[truncated*]"
      }
    ]
  }
]

Social References

More

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVE-2020-11146