CVE-2020-11125
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9150, MDM9607, MDM9650, MSM8905, MSM8917, MSM8953, Nicobar, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Un acceso fuera de límite puede ocurrir en el proceso del comando MHI debido a una falta de comprobación del valor de id del canal recibido desde los dispositivos MHI en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking en versiones Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9150, MDM9607, MDM9650, MSM8905, MSM8917, MSM8953, Nicobar, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-03-31 CVE Reserved
- 2020-11-02 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin | Broken Link |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin | 2020-11-09 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Agatti Firmware Search vendor "Qualcomm" for product "Agatti Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Agatti Search vendor "Qualcomm" for product "Agatti" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Apq8009 Firmware Search vendor "Qualcomm" for product "Apq8009 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Apq8009 Search vendor "Qualcomm" for product "Apq8009" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Bitra Firmware Search vendor "Qualcomm" for product "Bitra Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Bitra Search vendor "Qualcomm" for product "Bitra" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq4019 Firmware Search vendor "Qualcomm" for product "Ipq4019 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq4019 Search vendor "Qualcomm" for product "Ipq4019" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq5018 Firmware Search vendor "Qualcomm" for product "Ipq5018 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq5018 Search vendor "Qualcomm" for product "Ipq5018" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq6018 Firmware Search vendor "Qualcomm" for product "Ipq6018 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq6018 Search vendor "Qualcomm" for product "Ipq6018" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8064 Firmware Search vendor "Qualcomm" for product "Ipq8064 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8064 Search vendor "Qualcomm" for product "Ipq8064" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Ipq8074 Firmware Search vendor "Qualcomm" for product "Ipq8074 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Ipq8074 Search vendor "Qualcomm" for product "Ipq8074" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Kamorta Firmware Search vendor "Qualcomm" for product "Kamorta Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Kamorta Search vendor "Qualcomm" for product "Kamorta" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Mdm9150 Firmware Search vendor "Qualcomm" for product "Mdm9150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Mdm9150 Search vendor "Qualcomm" for product "Mdm9150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Mdm9607 Firmware Search vendor "Qualcomm" for product "Mdm9607 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Mdm9607 Search vendor "Qualcomm" for product "Mdm9607" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Mdm9650 Firmware Search vendor "Qualcomm" for product "Mdm9650 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Mdm9650 Search vendor "Qualcomm" for product "Mdm9650" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Msm8905 Firmware Search vendor "Qualcomm" for product "Msm8905 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Msm8905 Search vendor "Qualcomm" for product "Msm8905" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Msm8917 Firmware Search vendor "Qualcomm" for product "Msm8917 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Msm8917 Search vendor "Qualcomm" for product "Msm8917" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Msm8953 Firmware Search vendor "Qualcomm" for product "Msm8953 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Msm8953 Search vendor "Qualcomm" for product "Msm8953" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Nicobar Firmware Search vendor "Qualcomm" for product "Nicobar Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Nicobar Search vendor "Qualcomm" for product "Nicobar" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca6390 Firmware Search vendor "Qualcomm" for product "Qca6390 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca6390 Search vendor "Qualcomm" for product "Qca6390" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qca9531 Firmware Search vendor "Qualcomm" for product "Qca9531 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qca9531 Search vendor "Qualcomm" for product "Qca9531" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcm2150 Firmware Search vendor "Qualcomm" for product "Qcm2150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcm2150 Search vendor "Qualcomm" for product "Qcm2150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs404 Firmware Search vendor "Qualcomm" for product "Qcs404 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs404 Search vendor "Qualcomm" for product "Qcs404" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs405 Firmware Search vendor "Qualcomm" for product "Qcs405 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs405 Search vendor "Qualcomm" for product "Qcs405" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs605 Firmware Search vendor "Qualcomm" for product "Qcs605 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs605 Search vendor "Qualcomm" for product "Qcs605" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qcs610 Firmware Search vendor "Qualcomm" for product "Qcs610 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qcs610 Search vendor "Qualcomm" for product "Qcs610" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qm215 Firmware Search vendor "Qualcomm" for product "Qm215 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qm215 Search vendor "Qualcomm" for product "Qm215" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Qrb5165 Firmware Search vendor "Qualcomm" for product "Qrb5165 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Qrb5165 Search vendor "Qualcomm" for product "Qrb5165" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Rennell Firmware Search vendor "Qualcomm" for product "Rennell Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Rennell Search vendor "Qualcomm" for product "Rennell" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa415m Firmware Search vendor "Qualcomm" for product "Sa415m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa415m Search vendor "Qualcomm" for product "Sa415m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa515m Firmware Search vendor "Qualcomm" for product "Sa515m Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa515m Search vendor "Qualcomm" for product "Sa515m" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa6155p Firmware Search vendor "Qualcomm" for product "Sa6155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa6155p Search vendor "Qualcomm" for product "Sa6155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sa8155p Firmware Search vendor "Qualcomm" for product "Sa8155p Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sa8155p Search vendor "Qualcomm" for product "Sa8155p" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Saipan Firmware Search vendor "Qualcomm" for product "Saipan Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Saipan Search vendor "Qualcomm" for product "Saipan" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sc8180x Firmware Search vendor "Qualcomm" for product "Sc8180x Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sc8180x Search vendor "Qualcomm" for product "Sc8180x" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm429 Firmware Search vendor "Qualcomm" for product "Sdm429 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm429 Search vendor "Qualcomm" for product "Sdm429" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm429w Firmware Search vendor "Qualcomm" for product "Sdm429w Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm429w Search vendor "Qualcomm" for product "Sdm429w" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm439 Firmware Search vendor "Qualcomm" for product "Sdm439 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm439 Search vendor "Qualcomm" for product "Sdm439" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm450 Firmware Search vendor "Qualcomm" for product "Sdm450 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm450 Search vendor "Qualcomm" for product "Sdm450" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm632 Firmware Search vendor "Qualcomm" for product "Sdm632 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm632 Search vendor "Qualcomm" for product "Sdm632" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm660 Firmware Search vendor "Qualcomm" for product "Sdm660 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm660 Search vendor "Qualcomm" for product "Sdm660" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm670 Firmware Search vendor "Qualcomm" for product "Sdm670 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm670 Search vendor "Qualcomm" for product "Sdm670" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm710 Firmware Search vendor "Qualcomm" for product "Sdm710 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm710 Search vendor "Qualcomm" for product "Sdm710" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdm845 Firmware Search vendor "Qualcomm" for product "Sdm845 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdm845 Search vendor "Qualcomm" for product "Sdm845" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sdx55 Firmware Search vendor "Qualcomm" for product "Sdx55 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sdx55 Search vendor "Qualcomm" for product "Sdx55" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm6150 Firmware Search vendor "Qualcomm" for product "Sm6150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm6150 Search vendor "Qualcomm" for product "Sm6150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm7150 Firmware Search vendor "Qualcomm" for product "Sm7150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm7150 Search vendor "Qualcomm" for product "Sm7150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8150 Firmware Search vendor "Qualcomm" for product "Sm8150 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8150 Search vendor "Qualcomm" for product "Sm8150" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sm8250 Firmware Search vendor "Qualcomm" for product "Sm8250 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sm8250 Search vendor "Qualcomm" for product "Sm8250" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr1130 Firmware Search vendor "Qualcomm" for product "Sxr1130 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr1130 Search vendor "Qualcomm" for product "Sxr1130" | - | - |
Safe
|
| Qualcomm Search vendor "Qualcomm" | Sxr2130 Firmware Search vendor "Qualcomm" for product "Sxr2130 Firmware" | - | - |
Affected
| in | Qualcomm Search vendor "Qualcomm" | Sxr2130 Search vendor "Qualcomm" for product "Sxr2130" | - | - |
Safe
|