First published: Mon Aug 03 2020(Updated: )
u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | ||
Qualcomm APQ8009W Firmware | ||
Qualcomm APQ8009W | ||
Qualcomm APQ8096AU Firmware | ||
Qualcomm APQ8096AU Firmware | ||
qualcomm APQ8098 | ||
Qualcomm 8098 | ||
Qualcomm Bitra | ||
Qualcomm Bitra Firmware | ||
Qualcomm MD9607 Firmware | ||
Qualcomm MDM9607 firmware | ||
Qualcomm MDM9650 | ||
Qualcomm MDM9650 firmware | ||
Qualcomm MSM8917 | ||
Qualcomm MSM8917 Firmware | ||
Qualcomm 8920 Firmware | ||
Qualcomm 8920 | ||
Qualcomm 8937 Firmware | ||
qualcomm MSM8937 firmware | ||
qualcomm MSM8940 firmware | ||
Qualcomm 8940 | ||
Qualcomm 8953 Firmware | ||
Qualcomm MSM8953 Firmware | ||
Qualcomm MSM8998 | ||
Qualcomm 8998 | ||
Qualcomm QCM2150 | ||
Qualcomm QCM2150 Firmware | ||
Qualcomm QCS405 Firmware | ||
Qualcomm QCS405 Firmware | ||
Qualcomm ZZ QCS605 firmware | ||
Qualcomm QCS605 Firmware | ||
Qualcomm QCS610 Firmware | ||
Qualcomm QCS610 Firmware | ||
Qualcomm 215 Firmware | ||
Qualcomm 215 | ||
Qualcomm Rennell | ||
qualcomm Rennell firmware | ||
Qualcomm SA515M Firmware | ||
Qualcomm SA515M Firmware | ||
Qualcomm SA6155 | ||
Qualcomm SA6155P | ||
Qualcomm Saipan Firmware | ||
Qualcomm Saipan Firmware | ||
qualcomm SC8180X firmware | ||
Qualcomm SC8180X | ||
Qualcomm SDM429W | ||
Qualcomm SD429 | ||
Qualcomm SDM429W | ||
qualcomm SDM429W firmware | ||
qualcomm SDM439 firmware | ||
Qualcomm SDM439 Firmware | ||
Qualcomm SD 450 Firmware | ||
Qualcomm Snapdragon 450 | ||
Qualcomm SDM632 | ||
Qualcomm SDM632 | ||
Qualcomm SD660 Firmware | ||
Qualcomm Snapdragon 660 | ||
Qualcomm SD 670 Firmware | ||
Qualcomm SDM670 Firmware | ||
Qualcomm SD710 Firmware | ||
Qualcomm Snapdragon 710 | ||
Qualcomm SDA/SDM845 Firmware | ||
Qualcomm Snapdragon 845 | ||
Qualcomm SDX24 | ||
Qualcomm SDX24 | ||
Qualcomm SDX55M Firmware | ||
Qualcomm SDX55 Firmware | ||
qualcomm SM6150P firmware | ||
Qualcomm SM6150P | ||
qualcomm SM7150 firmware | ||
qualcomm SM7150 firmware | ||
Qualcomm SM8150P Firmware | ||
Qualcomm SM8150 Fusion | ||
Qualcomm SM8250 | ||
Qualcomm qsm8250 | ||
Qualcomm SXR1130 | ||
Qualcomm SXR1130 Firmware | ||
qualcomm SXR2130P firmware | ||
Qualcomm SXR2130 | ||
Qualcomm MDM9150 firmware | ||
Qualcomm MDM9150 firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-11128 has a medium severity rating due to potential out-of-bounds access that may lead to information disclosure or system instability.
To fix CVE-2020-11128, ensure that you apply the latest firmware updates provided by Qualcomm or the affected device manufacturer.
CVE-2020-11128 affects various Qualcomm Snapdragon platforms, including but not limited to APQ8009, APQ8096AU, and MSM8998 based devices.
The potential impacts of CVE-2020-11128 include unauthorized access to memory, which could lead to system crashes or exposure of sensitive information.
Currently, the best approach for CVE-2020-11128 is to apply the security patches, as there are no effective workarounds to mitigate the vulnerability.