NetSight
high7.8

CVE-2020-11306

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn…

Impact

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6420 Firmware
All versions
QualcommQca6421 Firmware
All versions
QualcommQca6426 Firmware
All versions
QualcommQca6430 Firmware
All versions
QualcommQca6431 Firmware
All versions
QualcommQca6436 Firmware
All versions
QualcommQca6574au Firmware
All versions
QualcommQca6595 Firmware
All versions

Weakness classification

References