CVE-2020-11265 - Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking

MEDIUM

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking

Published Jun 9, 2021

5.5

MEDIUM

CVSS 3.1

EPSS 0.18%

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
AR7420, AR9580, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, QCA10901, QCA4024, QCA7500, QCA7520, QCA7550, QCA8075, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9984, QCA9992, QCA9994, QCN3018, QFE1922, QFE1952, WCD9340, WSA8810	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3619		Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin		x_refsource_CONFIRMVendor Advisory