CVE-2020-11125

HIGH

Qualcomm Agatti Firmware - Out-of-bounds Write in MHI Command Process

Title source: llm

Description

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9150, MDM9607, MDM9650, MSM8905, MSM8917, MSM8953, Nicobar, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

References (2)

Core 2

Core References

Broken Link x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Patch, Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 13.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (48)

qualcomm/agatti_firmware

qualcomm/apq8009_firmware

qualcomm/bitra_firmware

qualcomm/ipq4019_firmware

qualcomm/ipq5018_firmware

qualcomm/ipq6018_firmware

qualcomm/ipq8064_firmware

qualcomm/ipq8074_firmware

qualcomm/kamorta_firmware

qualcomm/mdm9150_firmware

... and 38 more

Published Nov 02, 2020

Tracked Since Feb 18, 2026