VulnerabilityModified
CVE-2020-11237
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
HIGH 7.8EPSS 0.20%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- qualcomm/csrb31024 firmware · qualcomm/pm3003a firmware · qualcomm/pm456 firmware · qualcomm/pm6150 firmware · qualcomm/pm6150a firmware · qualcomm/pm6150l firmware · qualcomm/pm6250 firmware · qualcomm/pm6350 firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · qualcomm/pm8150c firmware · qualcomm/pm8150l firmware · qualcomm/pm8250 firmware · qualcomm/pm855 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.