CVE-2020-11237

HIGH

Qualcomm PMx Firmware - Denial of Service via Histogram KPI Input

Title source: llm
STIX 2.1

Description

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

References (1)

Core 1
Core References

Scores

CVSS v3 8.4
EPSS 0.0003
EPSS Percentile 9.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (50)
qualcomm/csrb31024_firmware
qualcomm/pm3003a_firmware
qualcomm/pm456_firmware
qualcomm/pm6150_firmware
qualcomm/pm6150a_firmware
qualcomm/pm6150l_firmware
qualcomm/pm6250_firmware
qualcomm/pm6350_firmware
qualcomm/pm7150a_firmware
qualcomm/pm7150l_firmware
... and 40 more
Published Apr 07, 2021
Tracked Since Feb 18, 2026