Description
Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, Kamorta, MDM9607, MSM8917, MSM8953, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/september-2020-bulletin
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
9.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (28)
qualcomm/apq8009_firmware
qualcomm/kamorta_firmware
qualcomm/mdm9607_firmware
qualcomm/msm8917_firmware
qualcomm/msm8953_firmware
qualcomm/nicobar_firmware
qualcomm/qcm2150_firmware
qualcomm/qcs405_firmware
qualcomm/qcs605_firmware
qualcomm/qm215_firmware
... and 18 more
Published
Sep 09, 2020
Tracked Since
Feb 18, 2026