CVE-2020-11121
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Un posible desbordamiento del búfer en el proceso WIFI hal debido al uso de memcpy sin comprobar la longitud del búfer de destino en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile en versiones QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-03-31 CVE Reserved
- 2020-11-12 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin | 2020-11-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Qcm4290 Firmware Search vendor "Qualcomm" for product "Qcm4290 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcm4290 Search vendor "Qualcomm" for product "Qcm4290" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs4290 Firmware Search vendor "Qualcomm" for product "Qcs4290 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs4290 Search vendor "Qualcomm" for product "Qcs4290" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qm215 Firmware Search vendor "Qualcomm" for product "Qm215 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qm215 Search vendor "Qualcomm" for product "Qm215" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qsm8350 Firmware Search vendor "Qualcomm" for product "Qsm8350 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qsm8350 Search vendor "Qualcomm" for product "Qsm8350" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6145p Firmware Search vendor "Qualcomm" for product "Sa6145p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6145p Search vendor "Qualcomm" for product "Sa6145p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155 Firmware Search vendor "Qualcomm" for product "Sa6155 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155 Search vendor "Qualcomm" for product "Sa6155" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155p Search vendor "Qualcomm" for product "Sa6155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155 Firmware Search vendor "Qualcomm" for product "Sa8155 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155 Search vendor "Qualcomm" for product "Sa8155" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155p Search vendor "Qualcomm" for product "Sa8155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sc8180x Firmware Search vendor "Qualcomm" for product "Sc8180x Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sc8180x Search vendor "Qualcomm" for product "Sc8180x" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sc8180xp Firmware Search vendor "Qualcomm" for product "Sc8180xp Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sc8180xp Search vendor "Qualcomm" for product "Sc8180xp" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55 Firmware Search vendor "Qualcomm" for product "Sdx55 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55 Search vendor "Qualcomm" for product "Sdx55" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55m Firmware Search vendor "Qualcomm" for product "Sdx55m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55m Search vendor "Qualcomm" for product "Sdx55m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm4250 Firmware Search vendor "Qualcomm" for product "Sm4250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm4250 Search vendor "Qualcomm" for product "Sm4250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm4250p Firmware Search vendor "Qualcomm" for product "Sm4250p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm4250p Search vendor "Qualcomm" for product "Sm4250p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6115 Firmware Search vendor "Qualcomm" for product "Sm6115 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6115 Search vendor "Qualcomm" for product "Sm6115" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6115p Firmware Search vendor "Qualcomm" for product "Sm6115p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6115p Search vendor "Qualcomm" for product "Sm6115p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6125 Firmware Search vendor "Qualcomm" for product "Sm6125 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6125 Search vendor "Qualcomm" for product "Sm6125" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6250 Firmware Search vendor "Qualcomm" for product "Sm6250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6250 Search vendor "Qualcomm" for product "Sm6250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6350 Firmware Search vendor "Qualcomm" for product "Sm6350 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6350 Search vendor "Qualcomm" for product "Sm6350" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7125 Firmware Search vendor "Qualcomm" for product "Sm7125 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7125 Search vendor "Qualcomm" for product "Sm7125" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7225 Firmware Search vendor "Qualcomm" for product "Sm7225 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7225 Search vendor "Qualcomm" for product "Sm7225" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7250 Firmware Search vendor "Qualcomm" for product "Sm7250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7250 Search vendor "Qualcomm" for product "Sm7250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7250p Firmware Search vendor "Qualcomm" for product "Sm7250p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7250p Search vendor "Qualcomm" for product "Sm7250p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8150 Firmware Search vendor "Qualcomm" for product "Sm8150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8150 Search vendor "Qualcomm" for product "Sm8150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8150p Firmware Search vendor "Qualcomm" for product "Sm8150p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8150p Search vendor "Qualcomm" for product "Sm8150p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8250 Firmware Search vendor "Qualcomm" for product "Sm8250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8250 Search vendor "Qualcomm" for product "Sm8250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8350 Firmware Search vendor "Qualcomm" for product "Sm8350 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8350 Search vendor "Qualcomm" for product "Sm8350" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8350p Firmware Search vendor "Qualcomm" for product "Sm8350p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8350p Search vendor "Qualcomm" for product "Sm8350p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr2130 Firmware Search vendor "Qualcomm" for product "Sxr2130 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr2130 Search vendor "Qualcomm" for product "Sxr2130" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr2130p Firmware Search vendor "Qualcomm" for product "Sxr2130p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr2130p Search vendor "Qualcomm" for product "Sxr2130p" | - | - |
Safe
|