CVE-2020-11236

HIGH

Qualcomm PMx Firmware - Denial of Service via Invalid KPI Dimension Value

Title source: llm

Description

Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Scores

CVSS v3 8.4

EPSS 0.0017

EPSS Percentile 37.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (50)

qualcomm/csrb31024_firmware

qualcomm/pm3003a_firmware

qualcomm/pm6150a_firmware

qualcomm/pm6150l_firmware

qualcomm/pm6350_firmware

qualcomm/pm7150a_firmware

qualcomm/pm7150l_firmware

qualcomm/pm7250_firmware

qualcomm/pm7250b_firmware

qualcomm/pm8008_firmware

... and 40 more

Published Apr 07, 2021

Tracked Since Feb 18, 2026