CVE-2020-11247 in Snapdragon Auto

Riassunto

di MITRE • 07/04/2021

Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Qualcomm, Inc.
• Prenotare: 31/03/2020
• Divulgazione: 07/04/2021
• Moderazione: accettato
• Voce: VDB-172565
• CPE: pronto
• CWE: CWE-125 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00944
• KEV: no
• Attività: molto basso
• Settore: Hospital, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-11247
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-11247
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-11247/