Details of VAR-202105-0055

ID

VAR-202105-0055

CVE

CVE-2020-11285

TITLE

plural Qualcomm Out-of-bounds read vulnerabilities in the product

Trust: 0.8

sources: JVNDB: JVNDB-2021-006501

DESCRIPTION

Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product contains an out-of-bounds read vulnerability.Information is obtained and denial of service (DoS) It may be put into a state. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements

Trust: 2.25

sources: NVD: CVE-2020-11285 // JVNDB: JVNDB-2021-006501 // CNNVD: CNNVD-202104-975 // VULMON: CVE-2020-11285

AFFECTED PRODUCTS

vendor:	qualcomm	model:	qpm5620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8019	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm8820	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd455	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8150l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9655	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd765g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	whs9410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8940	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8009w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9367	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd429	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5621	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm6585	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8208	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm640p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr1625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr865	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6851	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm640l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat5522	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2081fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd6905g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs605	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	aqt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6150a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3991	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9205	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet4200aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8608	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa2625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc410s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5658	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx50m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr735	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfs2530	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8009	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdw2500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet6110	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9326	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr052	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8037	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs4290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfs2580	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8952	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa4361	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1355	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd8c	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa415m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca4004	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd8655g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm4650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2302	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat5533	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5652	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8994	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln4642	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx24	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm3301	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6420	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9607	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9306	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsw6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5621	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtm525	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9635m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1351	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm456	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6150l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8150a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm2630	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb2351	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln5020	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdw3100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6694au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet4101	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8920	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln4640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9379	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd205	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800t	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd768g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmr735a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2307	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx50	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt2000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe1100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm6582	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9371	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9635	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3518	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3440fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr4605	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb358s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8909	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm7250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe1040	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1021aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdxr25g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8686	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1358	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1396	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb231	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smr526	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd710	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8053	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb358	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd632	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa5581	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr2955	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9645	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2305	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8821	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmk8003	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8842	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8150b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsw8574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr8250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet5100m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4465fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8996	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1395	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2520	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm630	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9645	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc801s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1357	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd712	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm670l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2101	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat5515	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmk8001	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtm527	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet6100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8940	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8953	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm7150l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm8207	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3514	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3519	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1035bd	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8802	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa5373	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4302	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm8895	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr660g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5677	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd210	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd8cx	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd730	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6174a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8017	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4373fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3910	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5679	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr8150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr3925	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smb1381	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3345	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd821	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2550	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1030	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2082fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8005	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe1045	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmw3100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd678	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsw8573	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdxr1	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7250p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm8870	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sc8180x\+sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa4360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm7250b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd765	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4309	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4303	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln5030	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6250p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8337	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	rgr7640au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8917	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8976sg	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5657	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8150c	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8953	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6431	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9628	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd870	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa4340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9207	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8009	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd450	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qet4100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4305	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm5677	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsm7250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi632	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csr6030	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa515m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4455fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm215	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr3905	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3550	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csrb31024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa5460	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd480	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmc1000h	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8209	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wgr7640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9625	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4308	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qtc800s	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8801	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd720g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx20	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wfr1620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qbt1500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8952	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm7150a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9206	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmi8996	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar8151	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm640a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm855p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm3003a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs603	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8976	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8108	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2301	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1020	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3555	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8096au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8937	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd636	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8084	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9385	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2080fc	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe3335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmx24	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmk8002	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3522	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa5580	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpm8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr105	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8803	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcc1110	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln5040	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm439	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm4290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat5516	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd750g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe1035	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6350	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smr525	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9377	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr5975	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe2340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm6150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8916	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm660l	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1036aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa8673	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr051	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr2965	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8956	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8008	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln4650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6421	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmr525	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdr735g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx20	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmr735b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8004	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmm855au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd820	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9330	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca4020	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6856	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5671	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr6955	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qualcomm215	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6694	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd665	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wtr4905	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9655	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	rsw8577	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8940	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qat3516	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qln1031	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9607	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pme605	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmd9655au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm2308	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pm8998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qfe4301	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qpa6560	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qdm5679	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	apq8017	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ar8151	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	aqt1000	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8096au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	csr 6030	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8084	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8009	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8053	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8009w	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8037	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-006501 // NVD: CVE-2020-11285

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-11285
value:	CRITICAL
Trust: 1.0
product-security@qualcomm.com:	CVE-2020-11285
value:	HIGH
Trust: 1.0
NVD:	CVE-2020-11285
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-202104-975
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-202105-029
value:	CRITICAL
Trust: 0.6
VULMON:	CVE-2020-11285
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2020-11285
severity:	HIGH
baseScore:	9.4
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	9.2
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9

nvd@nist.gov:	CVE-2020-11285
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.2
version:	3.1
Trust: 1.0
product-security@qualcomm.com:	CVE-2020-11285
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	4.2
version:	3.1
Trust: 1.0
NVD:	CVE-2020-11285
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2020-11285 // JVNDB: JVNDB-2021-006501 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202105-029 // NVD: CVE-2020-11285 // NVD: CVE-2020-11285

PROBLEMTYPE DATA

problemtype:	CWE-125	Trust: 1.0
problemtype:	Out-of-bounds read (CWE-125) [NVD Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-006501 // NVD: CVE-2020-11285

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202105-029

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202104-975

PATCH

title:	May 2021 Security Bulletin	url:	https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin	Trust: 0.8
title:	Qualcomm Fix for component buffer error vulnerability	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=150375	Trust: 0.6

sources: JVNDB: JVNDB-2021-006501 // CNNVD: CNNVD-202105-029

EXTERNAL IDS

db:	NVD	id:	CVE-2020-11285	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-006501	Trust: 0.8
db:	CS-HELP	id:	SB2021041363	Trust: 0.6
db:	CNNVD	id:	CNNVD-202104-975	Trust: 0.6
db:	CS-HELP	id:	SB2021050316	Trust: 0.6
db:	CS-HELP	id:	SB2021052006	Trust: 0.6
db:	CNNVD	id:	CNNVD-202105-029	Trust: 0.6
db:	VULMON	id:	CVE-2020-11285	Trust: 0.1

sources: VULMON: CVE-2020-11285 // JVNDB: JVNDB-2021-006501 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202105-029 // NVD: CVE-2020-11285

REFERENCES

url:	https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2020-11285	Trust: 0.8
url:	https://www.cybersecurity-help.cz/vdb/sb2021041363	Trust: 0.6
url:	https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-may-2021-35227	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021052006	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021050316	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2020-11285 // JVNDB: JVNDB-2021-006501 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202105-029 // NVD: CVE-2020-11285

SOURCES

db:	VULMON	id:	CVE-2020-11285
db:	JVNDB	id:	JVNDB-2021-006501
db:	CNNVD	id:	CNNVD-202104-975
db:	CNNVD	id:	CNNVD-202105-029
db:	NVD	id:	CVE-2020-11285

LAST UPDATE DATE

2024-08-14T12:13:47.866000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2020-11285	date:	2021-05-12T00:00:00
db:	JVNDB	id:	JVNDB-2021-006501	date:	2022-01-11T06:02:00
db:	CNNVD	id:	CNNVD-202104-975	date:	2021-04-14T00:00:00
db:	CNNVD	id:	CNNVD-202105-029	date:	2021-05-21T00:00:00
db:	NVD	id:	CVE-2020-11285	date:	2021-05-12T17:41:54.467

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2020-11285	date:	2021-05-07T00:00:00
db:	JVNDB	id:	JVNDB-2021-006501	date:	2022-01-11T00:00:00
db:	CNNVD	id:	CNNVD-202104-975	date:	2021-04-13T00:00:00
db:	CNNVD	id:	CNNVD-202105-029	date:	2021-05-03T00:00:00
db:	NVD	id:	CVE-2020-11285	date:	2021-05-07T09:15:07.947