Vulnerability Description
Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Aqt1000 Firmware | - |
| Qualcomm | Aqt1000 | - |
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Pm3003A Firmware | - |
| Qualcomm | Pm3003A | - |
| Qualcomm | Pm4125 Firmware | - |
| Qualcomm | Pm4125 | - |
| Qualcomm | Pm456 Firmware | - |
| Qualcomm | Pm456 | - |
| Qualcomm | Pm6125 Firmware | - |
| Qualcomm | Pm6125 | - |
| Qualcomm | Pm6150 Firmware | - |
| Qualcomm | Pm6150 | - |
| Qualcomm | Pm6150A Firmware | - |
| Qualcomm | Pm6150A | - |
| Qualcomm | Pm6150L Firmware | - |
| Qualcomm | Pm6150L | - |
| Qualcomm | Pm6250 Firmware | - |
| Qualcomm | Pm6250 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletiVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletiVendor Advisory
FAQ
What is CVE-2020-11165?
CVE-2020-11165 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...
How severe is CVE-2020-11165?
CVE-2020-11165 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11165?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Pm3003A Firmware.