Search/CVE-2020-11306
● CVE — High

CVE-2020-11306

VendorqualcommProductqca6574au firmware, sd 675 firmware, qcs405 firmware, sa6155p firmware, qca6390 firmware, qcs610 firmware, qcm4290 firmware, qcs4290 firmware, qsm8350 firmware, qcs410 firmware, qsm8250 firmware, sa8195p firmware, aqt1000 firmware, ar8035 firmware, qca6391 firmware, qca9984 firmware, qcm2290 firmware, qcs2290 firmware, qca6595 firmware, qca6420 firmware, qca6430 firmware, qca6421 firmware, qca6426 firmware, qca6431 firmware, qca6436 firmwareDiscoveredJun 9, 2021UpdatedNov 21, 2024

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
0.18%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jun 9, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024