Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-11205

EPSS 0.03% · P10
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-11205

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款Qualcomm产品输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Qualcomm SA Series等都是美国高通(Qualcomm)公司的产品。Qualcomm SA Series是一种支持5G的芯片组。QualComm SDX Series是一款应用于 5G 的芯片组。QualComm SM Series是一款移动端处理器芯片。 多款Qualcomm产品存在输入验证错误漏洞,该漏洞源于缺少对收到的数据包长度的检查,在处理命令时可能出现整数溢出到堆溢出的情况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P -

II. Public POCs for CVE-2020-11205

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-11205

登录查看更多情报信息。

Same Patch Batch · Qualcomm, Inc. · 2020-11-12 · 20 CVEs total

CVE-2020-11193Qualcomm Video 缓冲区错误漏洞
CVE-2020-3639Qualcomm Data Modem 输入验证错误漏洞
CVE-2020-3632MHI Ring Validation 输入验证错误漏洞
CVE-2020-11209Qualcomm Dsp Service 缓冲区错误漏洞
CVE-2020-11208Qualcomm DSP Service 数字错误漏洞
CVE-2020-11207Qualcomm LibFastCV 缓冲区错误漏洞
CVE-2020-11206多款Qualcomm产品安全漏洞
CVE-2020-11202Qualcomm 芯片缓冲区错误漏洞
CVE-2020-11201Qualcomm Video 输入验证错误漏洞
CVE-2020-11196Qualcomm Video 输入验证错误漏洞
CVE-2020-11121Qualcomm Wlan Firmware 缓冲区错误漏洞
CVE-2020-11184Qualcomm Video 输入验证错误漏洞
CVE-2020-11175多款Qualcomm产品资源管理错误漏洞
CVE-2020-11168Qualcomm Video 代码问题漏洞
CVE-2020-11132多款Qualcomm产品缓冲区错误漏洞
CVE-2020-11131Qualcomm 组件输入验证错误漏洞
CVE-2020-11130Qualcomm Wlan Firmware 缓冲区错误漏洞
CVE-2020-11127Qualcomm QTEE 输入验证错误漏洞
CVE-2020-11123Qualcomm HLOS 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2020-11205

No comments yet


Leave a comment