NetSight
IP …
medium5.9

CVE-2020-11294

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…

Impact

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommAr8035 Firmware
All versions
QualcommPm215 Firmware
All versions
QualcommPm3003a Firmware
All versions
QualcommPm6125 Firmware
All versions
QualcommPm6150 Firmware
All versions
QualcommPm6150a Firmware
All versions
QualcommPm6150l Firmware
All versions
QualcommPm6350 Firmware
All versions
QualcommPm640a Firmware
All versions
QualcommPm640l Firmware
All versions
QualcommPm640p Firmware
All versions
QualcommPm670 Firmware
All versions

Weakness classification

CWE-129

References