VulnerabilityModified
CVE-2020-11242
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
HIGH 7.8EPSS 0.20%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Affected
- qualcomm/pm660 firmware · qualcomm/pm660a firmware · qualcomm/pm660l firmware · qualcomm/pm855a firmware · qualcomm/pmm855au firmware · qualcomm/qat3514 firmware · qualcomm/qat3522 firmware · qualcomm/qat3550 firmware · qualcomm/qca6564a firmware · qualcomm/qca6564au firmware · qualcomm/qca6574a firmware · qualcomm/qca6574au firmware · qualcomm/qca6595 firmware · qualcomm/qca6595au firmware · qualcomm/qet4100 firmware · qualcomm/qet4101 firmware · qualcomm/qet4200aq firmware · qualcomm/qln1021aq firmware · qualcomm/qln1031 firmware · qualcomm/qln1036aq firmware · +18 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.