Vulnerability Description
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Pm4125 Firmware | - |
| Qualcomm | Pm4125 | - |
| Qualcomm | Pm4250 Firmware | - |
| Qualcomm | Pm4250 | - |
| Qualcomm | Pm6125 Firmware | - |
| Qualcomm | Pm6125 | - |
| Qualcomm | Pm6150A Firmware | - |
| Qualcomm | Pm6150A | - |
| Qualcomm | Pm6150L Firmware | - |
| Qualcomm | Pm6150L | - |
| Qualcomm | Pm6350 Firmware | - |
| Qualcomm | Pm6350 | - |
| Qualcomm | Pm7250B Firmware | - |
| Qualcomm | Pm7250B | - |
| Qualcomm | Pm8008 Firmware | - |
| Qualcomm | Pm8008 | - |
| Qualcomm | Pmd9655 Firmware | - |
| Qualcomm | Pmd9655 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinVendor Advisory
FAQ
What is CVE-2020-11210?
CVE-2020-11210 is a vulnerability with a CVSS score of 9.3 (CRITICAL). Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
How severe is CVE-2020-11210?
CVE-2020-11210 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-11210?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Pm4125 Firmware, Qualcomm Pm4125, Qualcomm Pm4250 Firmware.