CVE-2020-11132

Description

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

CVSS 3.1

7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0.19% probability · 8th percentile

CISA KEV

Not listed

Weakness

CWE-125

Affected

qualcomm/apq8009 firmware · qualcomm/apq8096au firmware · qualcomm/apq8098 firmware · qualcomm/mdm8207 firmware · qualcomm/mdm9150 firmware · qualcomm/mdm9205 firmware · qualcomm/mdm9206 firmware · qualcomm/mdm9207 firmware · qualcomm/mdm9250 firmware · qualcomm/mdm9607 firmware · qualcomm/mdm9628 firmware · qualcomm/mdm9650 firmware · qualcomm/msm8108 firmware · qualcomm/msm8208 firmware · qualcomm/msm8209 firmware · qualcomm/msm8608 firmware · qualcomm/msm8905 firmware · qualcomm/msm8909 firmware · qualcomm/msm8998 firmware · qualcomm/qcm4290 firmware · +40 more

Source

product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.