VulnerabilityModified
CVE-2020-11308
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
MEDIUM 6.8EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-129
- Affected
- qualcomm/apq8009 firmware · qualcomm/aqt1000 firmware · qualcomm/ar8031 firmware · qualcomm/ar8035 firmware · qualcomm/ar8151 firmware · qualcomm/csra6620 firmware · qualcomm/csra6640 firmware · qualcomm/csrb31024 firmware · qualcomm/fsm10055 firmware · qualcomm/fsm10056 firmware · qualcomm/mdm9250 firmware · qualcomm/mdm9655 firmware · qualcomm/pm3003a firmware · qualcomm/pm4125 firmware · qualcomm/pm4250 firmware · qualcomm/pm456 firmware · qualcomm/pm6125 firmware · qualcomm/pm6150 firmware · qualcomm/pm6150a firmware · qualcomm/pm6150l firmware · +40 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.