ID

VAR-202102-0127


CVE

CVE-2020-11286


TITLE

plural  Qualcomm  Buffer error vulnerability in the product

Trust: 0.8

sources: JVNDB: JVNDB-2020-016169

DESCRIPTION

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product contains a buffer error vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Trust: 1.71

sources: NVD: CVE-2020-11286 // JVNDB: JVNDB-2020-016169 // VULMON: CVE-2020-11286

AFFECTED PRODUCTS

vendor:qualcommmodel:qsw8573scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9250scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmd9607scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd 636scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe3335scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3660bscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qln1036aqscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3680bscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9640scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8810scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1350scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmd9635scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8064auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:msm8937scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1351scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm660ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd820scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdw3100scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8017scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe3100scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8076scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6320scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe1040scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe1035scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1360scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9626scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qtc800hscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr4905scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8009wscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmi8937scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8956scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9326scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:csr6030scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qpa4360scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd205scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdx20mscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qpa4340scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1357scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qln1030scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qet4100scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9341scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca9377scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe2340scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca9367scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd210scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8909scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8996scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm660scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3620scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qtc800tscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr2955scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6174scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdx20scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6174ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wgr7640scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9607scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6584scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9330scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3980scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr3950scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe3320scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmi8998scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmi8952scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmx20scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe3345scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3610scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmd9645scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9650scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:msm8996auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6584auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr3905scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8005scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdw2500scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qln1021aqscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9655scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6564ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qat3514scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9335scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8004scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:rgr7640auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wsa8815scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:msm8909wscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6310scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9230scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qet4101scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9306scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmm8996auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9330scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr5975scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8916scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8953scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qet4200aqscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8952scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd821scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr3925scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm660lscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb358sscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9206scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qca6574ascope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8096auscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9630scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdm630scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcd9340scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmk8001scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3615scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wtr2965scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmi8996scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmi8994scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qln1031scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qat3522scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qat3550scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qpa5460scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8998scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8009scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qtc800sscope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd660scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1358scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb1380scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:mdm9628scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:ar8151scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:wcn3990scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qbt1000scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:apq8053scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe1045scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:smb231scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qfe2550scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:rsw8577scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pm8937scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sdr660scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:qbt1500scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:sd835scope:eqversion: -

Trust: 1.0

vendor:qualcommmodel:pmd9655scope:eqversion: -

Trust: 1.0

vendor:クアルコムmodel:apq8017scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:ar8151scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8096auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8064auscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8009wscope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8053scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:csr 6030scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8076scope: - version: -

Trust: 0.8

vendor:クアルコムmodel:apq8009scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-016169 // NVD: CVE-2020-11286

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-11286
value: MEDIUM

Trust: 1.0

NVD: CVE-2020-11286
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202102-032
value: MEDIUM

Trust: 0.6

VULMON: CVE-2020-11286
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-11286
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

nvd@nist.gov: CVE-2020-11286
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.9
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2020-11286
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2020-11286 // JVNDB: JVNDB-2020-016169 // CNNVD: CNNVD-202102-032 // NVD: CVE-2020-11286

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:Buffer error (CWE-119) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-016169 // NVD: CVE-2020-11286

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-202102-032

PATCH

title:February 2021 Security Bulletinurl:https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Trust: 0.8

title:Qualcomm Connectivity Fixes for code issue vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=142991

Trust: 0.6

sources: JVNDB: JVNDB-2020-016169 // CNNVD: CNNVD-202102-032

EXTERNAL IDS

db:NVDid:CVE-2020-11286

Trust: 2.5

db:JVNDBid:JVNDB-2020-016169

Trust: 0.8

db:CNNVDid:CNNVD-202102-032

Trust: 0.6

db:VULMONid:CVE-2020-11286

Trust: 0.1

sources: VULMON: CVE-2020-11286 // JVNDB: JVNDB-2020-016169 // CNNVD: CNNVD-202102-032 // NVD: CVE-2020-11286

REFERENCES

url:https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2020-11286

Trust: 1.4

url:https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-february-2021-34454

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/119.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2020-11286 // JVNDB: JVNDB-2020-016169 // CNNVD: CNNVD-202102-032 // NVD: CVE-2020-11286

SOURCES

db:VULMONid:CVE-2020-11286
db:JVNDBid:JVNDB-2020-016169
db:CNNVDid:CNNVD-202102-032
db:NVDid:CVE-2020-11286

LAST UPDATE DATE

2024-08-14T13:54:15.730000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2020-11286date:2021-07-21T00:00:00
db:JVNDBid:JVNDB-2020-016169date:2021-11-11T08:53:00
db:CNNVDid:CNNVD-202102-032date:2021-03-02T00:00:00
db:NVDid:CVE-2020-11286date:2021-07-21T11:39:23.747

SOURCES RELEASE DATE

db:VULMONid:CVE-2020-11286date:2021-02-22T00:00:00
db:JVNDBid:JVNDB-2020-016169date:2021-11-11T00:00:00
db:CNNVDid:CNNVD-202102-032date:2021-02-01T00:00:00
db:NVDid:CVE-2020-11286date:2021-02-22T07:15:15.143