Vulnerability Description
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Aqt1000 Firmware | - |
| Qualcomm | Aqt1000 | - |
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Pm3003A Firmware | - |
| Qualcomm | Pm3003A | - |
| Qualcomm | Pm4125 Firmware | - |
| Qualcomm | Pm4125 | - |
| Qualcomm | Pm4250 Firmware | - |
| Qualcomm | Pm4250 | - |
| Qualcomm | Pm6125 Firmware | - |
| Qualcomm | Pm6125 | - |
| Qualcomm | Pm6150 Firmware | - |
| Qualcomm | Pm6150 | - |
| Qualcomm | Pm6150A Firmware | - |
| Qualcomm | Pm6150A | - |
| Qualcomm | Pm6150L Firmware | - |
| Qualcomm | Pm6150L | - |
| Qualcomm | Pm6350 Firmware | - |
| Qualcomm | Pm6350 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletinVendor Advisory
FAQ
What is CVE-2020-11245?
CVE-2020-11245 is a vulnerability with a CVSS score of 8.4 (HIGH). Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr...
How severe is CVE-2020-11245?
CVE-2020-11245 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11245?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Pm3003A Firmware.