8.4
Advisory Published
Updated

CVE-2020-11242

First published: Mon Apr 05 2021(Updated: )

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

Credit: product-security@qualcomm.com

Affected SoftwareAffected VersionHow to fix
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Pm660l
Google Android
Google Android
Google Android
Qualcomm Pmm855au
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Qat3550
Google Android
Google Android
Qualcomm Qca6564au Firmware
Google Android
Google Android
Google Android
Google Android
Qualcomm Qca6574au
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Qet4101
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Qln1036aq
Google Android
Qualcomm Qpa4340
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Qtc800h
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Sd636
Google Android
Qualcomm Sd660
Qualcomm Sdm630 Firmware
Qualcomm Sdm630
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Wcd9341 Firmware
Google Android
Google Android
Google Android
Google Android
Google Android
Qualcomm Wcn3990 Firmware
Google Android

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2020-11242?

    The severity of CVE-2020-11242 is high with a severity value of 7.8.

  • What software is affected by CVE-2020-11242?

    Google Android and various Qualcomm firmware versions are affected by CVE-2020-11242.

  • How can an attacker gain access to secure memory in CVE-2020-11242?

    An attacker can gain access to secure memory in CVE-2020-11242 by using incorrect arguments in the address range validation API.

  • What is the official reference for CVE-2020-11242?

    The official references for CVE-2020-11242 are: Qualcomm Product Security Bulletin (April 2021), Google Android Security Bulletin (April 2021).

  • Where can I find more information about CVE-2020-11242?

    You can find more information about CVE-2020-11242 in the Qualcomm Product Security Bulletin (April 2021) and the Google Android Security Bulletin (April 2021).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203