CVE-2020-11185

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-11185
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq6005:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq6010:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq6028:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8065:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8068:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8078:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm7350c:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8350:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8350b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8350bh:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8350bhs:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8350c:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmk7350:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmk8002:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmk8350:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmm6155au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmm8155au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmm8195au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmm855au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmr525:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmx55:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat5568:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6175a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6428:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6438:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca7500:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8072:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9880:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9886:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9888:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9889:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9898:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9984:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9985:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9990:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9992:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9994:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5021:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5022:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5024:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5052:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5054:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5064:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5121:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5122:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5124:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5152:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5154:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5164:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn5550:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn7606:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9000:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn9074:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm2307:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm2308:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm2310:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm3301:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm3302:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm4643:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm4650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5579:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5620:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5621:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5670:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5671:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5677:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qdm5679:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet5100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet5100m:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet6100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet6110:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfs2530:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfs2580:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfs2608:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfs2630:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln4642:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln4650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln5020:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln5030:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln5040:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa2625:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa5461:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa5580:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa5581:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa6560:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa8801:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa8802:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa8803:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa8821:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa8842:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm4621:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm4630:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm4640:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm4641:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm4650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5621:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5641:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5670:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5677:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5679:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5870:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm5875:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm6585:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm6621:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm6670:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm8820:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpm8870:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qtm525:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd8885g:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr660g:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr735:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr735g:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr8250:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr865:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx55m:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7350:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1394:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1395:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1396:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1398:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smr525:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smr526:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smr545:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smr546:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2021-01-21 10:15

Updated : 2024-02-04 21:23

NVD link : CVE-2020-11185

Mitre link : CVE-2020-11185

CVE.ORG link : CVE-2020-11185

JSON object : View

Products Affected

qualcomm

  • pm8009
  • qpm4650
  • qtm525
  • sa6145p
  • ipq4019
  • qdm5579
  • ipq8174
  • qcn5550
  • qpm5670
  • smr546
  • wcn6851
  • qpa8821
  • qca8075
  • qcn5124
  • qcn5152
  • qcn7606
  • qpm8820
  • pmk7350
  • qdm5679
  • qcn5122
  • qpm4641
  • smr545
  • ipq6005
  • sa6155p
  • qdm2310
  • ipq8076a
  • qat3516
  • ipq8070a
  • ar9380
  • pmx55
  • qca6428
  • qpm5621
  • ipq8064
  • qca9898
  • qpm4630
  • qca6564a
  • pmr735a
  • qpm5641
  • qpm5875
  • qcn5021
  • smb1395
  • qca9984
  • qpa6560
  • qet6100
  • ipq8072a
  • pmm855au
  • qpa8802
  • qln5030
  • smb1394
  • qcn5121
  • qat5516
  • pmk8002
  • qpm6670
  • pmm8195au
  • pmm8155au
  • qat3555
  • qat5515
  • qpa5580
  • sdx55
  • qat3519
  • qcn5022
  • qpm8870
  • qpm5677
  • sdr735
  • wcn6850
  • qat3514
  • ipq8065
  • wcn6740
  • qcn9000
  • qcn9074
  • qca6175a
  • qat5522
  • qca6390
  • qpa8842
  • pm7350c
  • ipq4028
  • qdm4650
  • sdr735g
  • qpa5461
  • qpa2625
  • qca6438
  • sd8885g
  • wcd9380
  • ipq6000
  • qfs2530
  • qca8081
  • qdm2308
  • qca9994
  • ipq8070
  • qdm3301
  • wcn3991
  • wcn6856
  • qpm4621
  • qca6574au
  • wcn6750
  • ipq6018
  • sdr865
  • smr526
  • qet6110
  • sa8150p
  • pmm6155au
  • ipq8072
  • smb1398
  • pmk8350
  • qca9889
  • qca4024
  • qcn5024
  • csr8811
  • wcd9385
  • wsa8835
  • pm8350b
  • qpm4640
  • qca9992
  • ipq4029
  • ipq8078
  • ipq6010
  • qcn5052
  • qet5100
  • smb1396
  • smr525
  • qdm5621
  • ipq6028
  • pm3003a
  • pm8350
  • qln4642
  • qca6574a
  • qdm3302
  • qfs2630
  • qcn5154
  • sdr8250
  • sdx55m
  • ipq8173
  • pm8008
  • qdm5670
  • sa8155p
  • ipq8071a
  • qca9985
  • pm8350bh
  • qln5040
  • qln4650
  • wsa8830
  • qpm5870
  • wcn3998
  • qcn5054
  • qca6584au
  • ipq4018
  • qat3518
  • ipq8074a
  • qpm5679
  • qet5100m
  • qca9880
  • qpa8803
  • qpm6585
  • sa8195p
  • sdr660g
  • qca9990
  • ipq8078a
  • ipq8076
  • qfs2580
  • qca6564au
  • qdm4643
  • pm8350bhs
  • ipq8071
  • qdm2307
  • qca9980
  • ipq8074
  • sa8155
  • sm7350
  • qca7500
  • qdm5620
  • wcd9341
  • pmr525
  • qpa8801
  • qca6595
  • qcn7605
  • qca6574
  • qca9888
  • ipq8068
  • qpa5581
  • qca8072
  • qat5568
  • qca6696
  • qdm5677
  • qpm6621
  • qca9886
  • pm8350c
  • qfs2608
  • qcn5164
  • qln5020
  • qca6391
  • qdm5671
  • wcn3910
  • pmr735b
  • qcn5064
  • qca6595au
CWE
CWE-787

Out-of-bounds Write