CVE-2020-11184
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P,…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.95% probability · 59th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- qualcomm/qcm4290 firmware · qualcomm/qcs4290 firmware · qualcomm/qm215 firmware · qualcomm/qsm8350 firmware · qualcomm/sa6145p firmware · qualcomm/sa6155 firmware · qualcomm/sa6155p firmware · qualcomm/sa8155 firmware · qualcomm/sa8155p firmware · qualcomm/sdx55 firmware · qualcomm/sdx55m firmware · qualcomm/sm4250 firmware · qualcomm/sm4250p firmware · qualcomm/sm6115 firmware · qualcomm/sm6115p firmware · qualcomm/sm6125 firmware · qualcomm/sm6250 firmware · qualcomm/sm6350 firmware · qualcomm/sm7125 firmware · qualcomm/sm7225 firmware · +9 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.