CVE-2020-11242

CVSS 8.4 HIGHEPSS 0.2%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

07 Apr 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Qualcomm, Inc. · Snapdragon Industrial IOT, Snapdragon Mobile

References

https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin