CVE-2020-11265

MEDIUM

Qualcomm Ar7420 Firmware - Out-of-Bounds Read

Title source: rule

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 5.5

EPSS 0.0004

EPSS Percentile 13.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-125

Status published

Products (26)

qualcomm/ar7420_firmware

qualcomm/ar9580_firmware

qualcomm/csr8811_firmware

qualcomm/ipq4018_firmware

qualcomm/ipq4019_firmware

qualcomm/ipq4028_firmware

qualcomm/ipq4029_firmware

qualcomm/qca10901_firmware

qualcomm/qca4024_firmware

qualcomm/qca7500_firmware

... and 16 more

Published Jun 09, 2021

Tracked Since Feb 18, 2026