CVE-2020-11242

High

Description

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

SeverityHigh
CVSS8.4
Exploit probability—
ProductQualcomm Pm660 Firmware
PublishedApr 7, 2021
First seenApr 7, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm pm660_firmwareNo range specified—
qualcomm pm660a_firmwareNo range specified—
qualcomm pm660l_firmwareNo range specified—
qualcomm pm855a_firmwareNo range specified—
qualcomm pmm855au_firmwareNo range specified—
qualcomm qat3514_firmwareNo range specified—
qualcomm qat3522_firmwareNo range specified—
qualcomm qat3550_firmwareNo range specified—
qualcomm qca6564a_firmwareNo range specified—
qualcomm qca6564au_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca6595_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qet4100_firmwareNo range specified—
qualcomm qet4101_firmwareNo range specified—
qualcomm qet4200aq_firmwareNo range specified—
qualcomm qln1021aq_firmwareNo range specified—
qualcomm qln1031_firmwareNo range specified—
qualcomm qln1036aq_firmwareNo range specified—
qualcomm qpa4340_firmwareNo range specified—
qualcomm qpa4360_firmwareNo range specified—
qualcomm qpa5460_firmwareNo range specified—
qualcomm qtc800h_firmwareNo range specified—
qualcomm qtc800s_firmwareNo range specified—
qualcomm rsw8577_firmwareNo range specified—
qualcomm sd455_firmwareNo range specified—
qualcomm sd636_firmwareNo range specified—
qualcomm sd660_firmwareNo range specified—
qualcomm sdm630_firmwareNo range specified—
qualcomm sdr660_firmwareNo range specified—
qualcomm smb1351_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3990_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.