NetSight
high7.8

CVE-2020-11187

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Impact

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommPm7150a Firmware
All versions
QualcommPm7150l Firmware
All versions
QualcommPm7250 Firmware
All versions
QualcommPm7250b Firmware
All versions
QualcommPm8004 Firmware
All versions
QualcommPm8008 Firmware
All versions
QualcommPm855 Firmware
All versions
QualcommPm855b Firmware
All versions
QualcommPm855l Firmware
All versions
QualcommPm855p Firmware
All versions

Weakness classification

References