CVE-2020-11181
High
Description
Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
SeverityHigh
CVSS7.8
Exploit probability11. percentile0.2%
Product
Qualcomm Pm3003a Firmware
PublishedJan 21, 2021
First seenJan 21, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm pm3003a_firmware | No range specified | — |
| qualcomm pm8009_firmware | No range specified | — |
| qualcomm pm8150a_firmware | No range specified | — |
| qualcomm pm8150b_firmware | No range specified | — |
| qualcomm pm8150c_firmware | No range specified | — |
| qualcomm pm8150l_firmware | No range specified | — |
| qualcomm pm8250_firmware | No range specified | — |
| qualcomm pmk8002_firmware | No range specified | — |
| qualcomm pmr525_firmware | No range specified | — |
| qualcomm pmx55_firmware | No range specified | — |
| qualcomm qbt2000_firmware | No range specified | — |
| qualcomm qca6390_firmware | No range specified | — |
| qualcomm qca6391_firmware | No range specified | — |
| qualcomm qca6421_firmware | No range specified | — |
| qualcomm qca6426_firmware | No range specified | — |
| qualcomm qca6431_firmware | No range specified | — |
| qualcomm qca6436_firmware | No range specified | — |
| qualcomm qfs2530_firmware | No range specified | — |
| qualcomm qfs2580_firmware | No range specified | — |
| qualcomm qsm8250_firmware | No range specified | — |
| qualcomm qtc800h_firmware | No range specified | — |
| qualcomm qtc801s_firmware | No range specified | — |
| qualcomm sd865_5g_firmware | No range specified | — |
| qualcomm sdr8250_firmware | No range specified | — |
| qualcomm sdr865_firmware | No range specified | — |
| qualcomm sdx55_firmware | No range specified | — |
| qualcomm sdx55m_firmware | No range specified | — |
| qualcomm sdxr2_5g_firmware | No range specified | — |
| qualcomm smb1355_firmware | No range specified | — |
| qualcomm smb1390_firmware | No range specified | — |
| qualcomm smr525_firmware | No range specified | — |
| qualcomm smr526_firmware | No range specified | — |
| qualcomm wcd9380_firmware | No range specified | — |
| qualcomm wcd9385_firmware | No range specified | — |
| qualcomm wcn6750_firmware | No range specified | — |
| qualcomm wcn6850_firmware | No range specified | — |
| qualcomm wcn6851_firmware | No range specified | — |
| qualcomm wsa8810_firmware | No range specified | — |
| qualcomm wsa8815_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.