VulnerabilityModified
CVE-2020-11253
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
HIGH 7.8EPSS 0.16%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-787
- Affected
- qualcomm/aqt1000 firmware · qualcomm/pm3003a firmware · qualcomm/pm6150 firmware · qualcomm/pm6150a firmware · qualcomm/pm6150l firmware · qualcomm/pm6350 firmware · qualcomm/pm7150a firmware · qualcomm/pm7150l firmware · qualcomm/pm7250 firmware · qualcomm/pm7250b firmware · qualcomm/pm8004 firmware · qualcomm/pm8008 firmware · qualcomm/pm8009 firmware · qualcomm/pm8150 firmware · qualcomm/pm8150a firmware · qualcomm/pm8150b firmware · qualcomm/pm8150c firmware · qualcomm/pm8150l firmware · qualcomm/pm8250 firmware · qualcomm/pm855 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.