CVE-2020-11308

MEDIUM

Qualcomm Firmware - Buffer Overflow via ASCII to Unicode String Conversion

Title source: llm
STIX 2.1

Description

Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

References (1)

Core 1
Core References

Scores

CVSS v3 6.8
EPSS 0.0004
EPSS Percentile 11.1%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-129
Status published
Products (50)
qualcomm/apq8009_firmware
qualcomm/aqt1000_firmware
qualcomm/ar8031_firmware
qualcomm/ar8035_firmware
qualcomm/ar8151_firmware
qualcomm/csra6620_firmware
qualcomm/csra6640_firmware
qualcomm/csrb31024_firmware
qualcomm/fsm10055_firmware
qualcomm/fsm10056_firmware
... and 40 more
Published Mar 17, 2021
Tracked Since Feb 18, 2026