Description
u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MSM8917, MSM8953, Nicobar, QCA6390, QCM2150, QCS404, QCS405, QCS605, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
References (2)
Core 2
Core References
Broken Link x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin
Scores
CVSS v3
7.8
EPSS
0.0005
EPSS Percentile
16.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (40)
qualcomm/agatti_firmware
qualcomm/apq8009_firmware
qualcomm/bitra_firmware
qualcomm/ipq4019_firmware
qualcomm/ipq5018_firmware
qualcomm/ipq6018_firmware
qualcomm/ipq8064_firmware
qualcomm/ipq8074_firmware
qualcomm/kamorta_firmware
qualcomm/mdm9607_firmware
... and 30 more
Published
Nov 02, 2020
Tracked Since
Feb 18, 2026