CVE-2020-11256

High

Description

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking

SeverityHigh
CVSS8.8
Exploit probability—
ProductQualcomm Ar7420 Firmware
PublishedJun 9, 2021
First seenJun 9, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm ar7420_firmwareNo range specified—
qualcomm ar9580_firmwareNo range specified—
qualcomm csr8811_firmwareNo range specified—
qualcomm ipq4018_firmwareNo range specified—
qualcomm ipq4019_firmwareNo range specified—
qualcomm ipq4028_firmwareNo range specified—
qualcomm ipq4029_firmwareNo range specified—
qualcomm qca10901_firmwareNo range specified—
qualcomm qca4024_firmwareNo range specified—
qualcomm qca7500_firmwareNo range specified—
qualcomm qca7520_firmwareNo range specified—
qualcomm qca7550_firmwareNo range specified—
qualcomm qca8075_firmwareNo range specified—
qualcomm qca9880_firmwareNo range specified—
qualcomm qca9886_firmwareNo range specified—
qualcomm qca9888_firmwareNo range specified—
qualcomm qca9889_firmwareNo range specified—
qualcomm qca9898_firmwareNo range specified—
qualcomm qca9984_firmwareNo range specified—
qualcomm qca9992_firmwareNo range specified—
qualcomm qca9994_firmwareNo range specified—
qualcomm qcn3018_firmwareNo range specified—
qualcomm qfe1922_firmwareNo range specified—
qualcomm qfe1952_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-11256 · Qualcomm Ar7420 Firmware · Dark Radar