CVE-2020-11125: High severity Google Android vulnerability
u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9150, MDM9607, MDM9650, MSM8905, MSM8917, MSM8953, Nicobar, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11125?
CVE-2020-11125 has a critical severity rating due to potential out-of-bounds access vulnerabilities.
How do I fix CVE-2020-11125?
To fix CVE-2020-11125, update your firmware to the latest version provided by Qualcomm or your device manufacturer.
What types of devices are affected by CVE-2020-11125?
CVE-2020-11125 affects various Snapdragon devices including Snapdragon Auto, Snapdragon Mobile, and others.
What is the potential impact of CVE-2020-11125?
The potential impact of CVE-2020-11125 includes unauthorized access to system functions and data exposure.
Is CVE-2020-11125 related to Android?
Yes, CVE-2020-11125 affects certain versions of Android running on vulnerable Qualcomm Snapdragon chipsets.