NetSight
medium6.7

CVE-2020-11198

Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, …

Impact

Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsr8811 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommFsm10055 Firmware
All versions
QualcommFsm10056 Firmware
All versions
QualcommIpq6000 Firmware
All versions
QualcommIpq6005 Firmware
All versions
QualcommIpq6010 Firmware
All versions

Weakness classification

References