CVE-2020-11194
HIGHQualcomm AQT1000 Firmware - Memory Corruption via Improper Response Buffer Length Check
Title source: llmDescription
Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
9.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
CWE-20
Status
published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/ar8035_firmware
qualcomm/pm3003a_firmware
qualcomm/pm4125_firmware
qualcomm/pm4250_firmware
qualcomm/pm456_firmware
qualcomm/pm6125_firmware
qualcomm/pm6150_firmware
qualcomm/pm6150a_firmware
qualcomm/pm6150l_firmware
... and 40 more
Published
Feb 22, 2021
Tracked Since
Feb 18, 2026