CVE-2020-11286

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-11286
An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8151:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:csr6030:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9230:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9330:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9626:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9630:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8004:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8909:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8916:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8937:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8952:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8953:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8956:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8996:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pm8998:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmd9607:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmd9635:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmd9645:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmd9655:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmi8937:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmi8952:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmi8994:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmi8996:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmi8998:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmk8001:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmm8996au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:pmx20:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qbt1000:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet4100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet4101:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qet4200aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe1035:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe1040:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe1045:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe2340:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe2550:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe3100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe3320:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe3335:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfe3345:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1021aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1030:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1031:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qln1036aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa4340:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa4360:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qpa5460:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qsw8573:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qtc800h:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qtc800s:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qtc800t:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:rgr7640au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:rsw8577:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdr660:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdw2500:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdw3100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx20m:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1350:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1357:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1358:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1360:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb1380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb231:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:smb358s:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wgr7640:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr2955:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr2965:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr3905:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr3925:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr3950:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr4905:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wtr5975:-:*:*:*:*:*:*:*
History

21 Nov 2024, 04:57

Type Values Removed Values Added
References () https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin - Patch, Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin - Patch, Vendor Advisory
Information

Published : 2021-02-22 07:15

Updated : 2024-11-21 04:57

NVD link : CVE-2020-11286

Mitre link : CVE-2020-11286

CVE.ORG link : CVE-2020-11286

JSON object : View

Products Affected

qualcomm

  • mdm9640
  • qfe3345
  • wsa8810
  • pm8998
  • apq8064au
  • apq8076
  • mdm9230
  • apq8017
  • qca6574au
  • mdm9330
  • pm660a
  • qfe1040
  • wtr4905
  • smb231
  • smb1360
  • qet4200aq
  • mdm9250
  • pmd9607
  • apq8009
  • mdm9650
  • wtr2955
  • qpa4360
  • qat3522
  • sd835
  • apq8053
  • wcn3990
  • pmi8994
  • qat3514
  • sdw2500
  • qca9367
  • wcn3980
  • qln1030
  • qsw8573
  • sd820
  • wtr2965
  • smb1351
  • rgr7640au
  • qca9377
  • qtc800t
  • pm8952
  • qat3550
  • qca6574a
  • pm8005
  • qbt1000
  • qpa4340
  • wcn3680b
  • wcd9340
  • qbt1500
  • mdm9630
  • wcd9330
  • mdm9206
  • qln1031
  • wcn3620
  • pm8953
  • wcd9306
  • wcn3660b
  • ar8151
  • qca6564a
  • sd660
  • qpa5460
  • qln1036aq
  • pm8909
  • smb1350
  • pmi8937
  • pmd9645
  • mdm9626
  • sd821
  • smb1357
  • sdx20m
  • wtr5975
  • pm660l
  • qfe3320
  • qfe3100
  • sdw3100
  • qca6584au
  • smb358s
  • qca6574
  • sd205
  • wtr3925
  • mdm9655
  • sd210
  • msm8996au
  • qfe2550
  • wcn3610
  • qln1021aq
  • pmi8996
  • qet4100
  • qtc800h
  • mdm9607
  • pm660
  • sdx20
  • qca6174a
  • pmm8996au
  • pmi8952
  • pmx20
  • qca6320
  • mdm9628
  • pmi8998
  • sd_636
  • wsa8815
  • wcn3615
  • qfe1045
  • wtr3905
  • apq8096au
  • smb1358
  • wtr3950
  • qca6584
  • csr6030
  • smb1380
  • wcd9326
  • pmd9655
  • pmk8001
  • rsw8577
  • qfe3335
  • qtc800s
  • qca6174
  • sdm630
  • sdr660
  • qet4101
  • pm8956
  • pmd9635
  • qfe1035
  • pm8916
  • wgr7640
  • apq8009w
  • msm8909w
  • qca6564au
  • qca6310
  • pm8996
  • pm8937
  • wcd9335
  • pm8004
  • msm8937
  • qfe2340
  • wcd9341
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer