CVE-2020-11254: Null Pointer Dereference
First published: Fri May 07 2021(Updated: )
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qualcomm Pm6150a | ||
| Qualcomm Pm6150l | ||
| Qualcomm Pm6350 | ||
| Qualcomm pm660 | ||
| Qualcomm pm660l | ||
| Qualcomm Pm7250b | ||
| Qualcomm Pm8008 | ||
| Qualcomm Pm8009 | ||
| Qualcomm Pm8350 | ||
| Qualcomm Pm8350b | ||
| Qualcomm Pm8350bh | ||
| Qualcomm Pm8350c | ||
| Qualcomm Pmk8003 | ||
| Qualcomm Pmk8350 | ||
| Qualcomm Pmm6155au | ||
| Qualcomm Pmm8155au | ||
| Qualcomm Pmm8195au | ||
| Qualcomm Pmr735a | ||
| Qualcomm Pmr735b | ||
| Qualcomm Qat3516 | ||
| Qualcomm Qat3518 | ||
| Qualcomm Qat3519 | ||
| Qualcomm Qat3555 | ||
| Qualcomm Qat5515 | ||
| Qualcomm Qat5516 | ||
| Qualcomm Qat5522 | ||
| Qualcomm Qat5568 | ||
| Qualcomm Qbt1500 | ||
| qualcomm qca6574au | ||
| qualcomm qca6696 | ||
| Qualcomm Qdm3301 | ||
| Qualcomm Qdm4643 | ||
| Qualcomm Qdm4650 | ||
| Qualcomm Qdm5620 | ||
| Qualcomm Qdm5621 | ||
| Qualcomm Qdm5670 | ||
| Qualcomm Qdm5671 | ||
| Qualcomm Qet5100 | ||
| Qualcomm Qet5100m | ||
| Qualcomm Qet6100 | ||
| Qualcomm Qet6105 | ||
| Qualcomm Qet6110 | ||
| Qualcomm Qfs2530 | ||
| Qualcomm Qfs2580 | ||
| Qualcomm Qfs2608 | ||
| Qualcomm Qfs2630 | ||
| Qualcomm Qln4642 | ||
| Qualcomm Qln4650 | ||
| Qualcomm Qln5020 | ||
| Qualcomm Qln5030 | ||
| Qualcomm Qln5040 | ||
| Qualcomm Qpa2625 | ||
| Qualcomm Qpa5461 | ||
| Qualcomm Qpa5580 | ||
| Qualcomm Qpa5581 | ||
| Qualcomm Qpa8801 | ||
| Qualcomm Qpa8802 | ||
| Qualcomm Qpa8803 | ||
| Qualcomm Qpa8821 | ||
| Qualcomm Qpa8842 | ||
| Qualcomm Qpm4621 | ||
| Qualcomm Qpm4630 | ||
| Qualcomm Qpm4640 | ||
| Qualcomm Qpm4641 | ||
| Qualcomm Qpm4650 | ||
| Qualcomm Qpm5621 | ||
| Qualcomm Qpm5641 | ||
| Qualcomm Qpm5670 | ||
| Qualcomm Qpm5677 | ||
| Qualcomm Qpm5679 | ||
| Qualcomm Qpm5870 | ||
| Qualcomm Qpm5875 | ||
| Qualcomm Qpm6585 | ||
| Qualcomm Qpm6621 | ||
| Qualcomm Qpm6670 | ||
| Qualcomm Qpm8820 | ||
| Qualcomm Qpm8870 | ||
| Qualcomm Qtc800h | ||
| Qualcomm Qtc800s | ||
| Qualcomm Qtc801s | ||
| Qualcomm Qtm525 | ||
| Qualcomm sa6145p | ||
| Qualcomm sa6150p | ||
| qualcomm SA6155P | ||
| Qualcomm sa8150p | ||
| Qualcomm sa8155p | ||
| Qualcomm sa8195p | ||
| Qualcomm Snapdragon 480 | ||
| qualcomm sd670 | ||
| Qualcomm sd710 | ||
| Qualcomm sd888 | ||
| qualcomm sd888 5g | ||
| Qualcomm Sdr660 | ||
| Qualcomm Sdr660g | ||
| Qualcomm Sdr735 | ||
| Qualcomm Sdr735g | ||
| Qualcomm Sdr865 | ||
| qualcomm sdxr1 | ||
| Qualcomm Smb1351 | ||
| Qualcomm Smb1355 | ||
| Qualcomm Smb1396 | ||
| Qualcomm Smb1398 | ||
| Qualcomm Smr526 | ||
| Qualcomm Smr545 | ||
| Qualcomm Smr546 | ||
| Qualcomm wcd9326 | ||
| qualcomm wcd9341 | ||
| Qualcomm wcd9370 | ||
| Qualcomm wcd9375 | ||
| qualcomm wcd9380 | ||
| qualcomm wcd9385 | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3988 | ||
| qualcomm wcn3990 | ||
| Qualcomm WCN3991 Firmware | ||
| Qualcomm WCN6850 Firmware | ||
| Qualcomm WCN6851 Firmware | ||
| qualcomm wcn6855 | ||
| qualcomm wcn6856 | ||
| qualcomm wsa8830 | ||
| qualcomm wsa8835 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-11254?
CVE-2020-11254 is rated as high severity due to its potential for memory corruption.
How do I fix CVE-2020-11254?
To fix CVE-2020-11254, apply the latest firmware updates provided by Qualcomm for affected devices.
What devices are affected by CVE-2020-11254?
CVE-2020-11254 affects various Snapdragon models including PM6150A, PM6350, and several others.
What type of vulnerability is CVE-2020-11254?
CVE-2020-11254 is a memory corruption vulnerability caused by dereferencing an invalid session context pointer.
Is CVE-2020-11254 being actively exploited?
As of the latest information, there is no evidence indicating that CVE-2020-11254 is actively being exploited in the wild.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/qualcomm
- canonical/qualcomm pm6150a
- canonical/qualcomm pm6150l
- canonical/qualcomm pm6350
- canonical/qualcomm pm660
- canonical/qualcomm pm660l
- canonical/qualcomm pm7250b
- canonical/qualcomm pm8008
- canonical/qualcomm pm8009
- canonical/qualcomm pm8350
- canonical/qualcomm pm8350b
- canonical/qualcomm pm8350bh
- canonical/qualcomm pm8350c
- canonical/qualcomm pmk8003
- canonical/qualcomm pmk8350
- canonical/qualcomm pmm6155au
- canonical/qualcomm pmm8155au
- canonical/qualcomm pmm8195au
- canonical/qualcomm pmr735a
- canonical/qualcomm pmr735b
- canonical/qualcomm qat3516
- canonical/qualcomm qat3518
- canonical/qualcomm qat3519
- canonical/qualcomm qat3555
- canonical/qualcomm qat5515
- canonical/qualcomm qat5516
- canonical/qualcomm qat5522
- canonical/qualcomm qat5568
- canonical/qualcomm qbt1500
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6696
- canonical/qualcomm qdm3301
- canonical/qualcomm qdm4643
- canonical/qualcomm qdm4650
- canonical/qualcomm qdm5620
- canonical/qualcomm qdm5621
- canonical/qualcomm qdm5670
- canonical/qualcomm qdm5671
- canonical/qualcomm qet5100
- canonical/qualcomm qet5100m
- canonical/qualcomm qet6100
- canonical/qualcomm qet6105
- canonical/qualcomm qet6110
- canonical/qualcomm qfs2530
- canonical/qualcomm qfs2580
- canonical/qualcomm qfs2608
- canonical/qualcomm qfs2630
- canonical/qualcomm qln4642
- canonical/qualcomm qln4650
- canonical/qualcomm qln5020
- canonical/qualcomm qln5030
- canonical/qualcomm qln5040
- canonical/qualcomm qpa2625
- canonical/qualcomm qpa5461
- canonical/qualcomm qpa5580
- canonical/qualcomm qpa5581
- canonical/qualcomm qpa8801
- canonical/qualcomm qpa8802
- canonical/qualcomm qpa8803
- canonical/qualcomm qpa8821
- canonical/qualcomm qpa8842
- canonical/qualcomm qpm4621
- canonical/qualcomm qpm4630
- canonical/qualcomm qpm4640
- canonical/qualcomm qpm4641
- canonical/qualcomm qpm4650
- canonical/qualcomm qpm5621
- canonical/qualcomm qpm5641
- canonical/qualcomm qpm5670
- canonical/qualcomm qpm5677
- canonical/qualcomm qpm5679
- canonical/qualcomm qpm5870
- canonical/qualcomm qpm5875
- canonical/qualcomm qpm6585
- canonical/qualcomm qpm6621
- canonical/qualcomm qpm6670
- canonical/qualcomm qpm8820
- canonical/qualcomm qpm8870
- canonical/qualcomm qtc800h
- canonical/qualcomm qtc800s
- canonical/qualcomm qtc801s
- canonical/qualcomm qtm525
- canonical/qualcomm sa6145p
- canonical/qualcomm sa6150p
- canonical/qualcomm sa6155p
- canonical/qualcomm sa8150p
- canonical/qualcomm sa8155p
- canonical/qualcomm sa8195p
- canonical/qualcomm snapdragon 480
- canonical/qualcomm sd670
- canonical/qualcomm sd710
- canonical/qualcomm sd888
- canonical/qualcomm sd888 5g
- canonical/qualcomm sdr660
- canonical/qualcomm sdr660g
- canonical/qualcomm sdr735
- canonical/qualcomm sdr735g
- canonical/qualcomm sdr865
- canonical/qualcomm sdxr1
- canonical/qualcomm smb1351
- canonical/qualcomm smb1355
- canonical/qualcomm smb1396
- canonical/qualcomm smb1398
- canonical/qualcomm smr526
- canonical/qualcomm smr545
- canonical/qualcomm smr546
- canonical/qualcomm wcd9326
- canonical/qualcomm wcd9341
- canonical/qualcomm wcd9370
- canonical/qualcomm wcd9375
- canonical/qualcomm wcd9380
- canonical/qualcomm wcd9385
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3988
- canonical/qualcomm wcn3990
- canonical/qualcomm wcn3991 firmware
- canonical/qualcomm wcn6850 firmware
- canonical/qualcomm wcn6851 firmware
- canonical/qualcomm wcn6855
- canonical/qualcomm wcn6856
- canonical/qualcomm wsa8830
- canonical/qualcomm wsa8835