VulnerabilityModified
CVE-2020-11186
Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
MEDIUM 5.5EPSS 0.18%
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-835
- Affected
- qualcomm/csrb31024 firmware · qualcomm/pm3003a firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · qualcomm/pm8150c firmware · qualcomm/pm8150l firmware · qualcomm/pm8250 firmware · qualcomm/pmk8002 firmware · qualcomm/pmr525 firmware · qualcomm/pmx24 firmware · qualcomm/pmx55 firmware · qualcomm/qat3516 firmware · qualcomm/qat3518 firmware · qualcomm/qat3519 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.