What is CVE-2020-11242?

CVE-2020-11242 is a high-severity vulnerability in Qualcomm Pm660. CVSS score: 8.4/10. Published 2021-04-07.

How severe is CVE-2020-11242?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Qualcomm Pm660

CVE-2020-11242

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Pm660
Qualcomm Pm660a
Qualcomm Pm660a_firmware
Qualcomm Pm660_firmware
Qualcomm Pm660l
Qualcomm Pm660l_firmware
Qualcomm Pm855a
Qualcomm Pm855a_firmware
Qualcomm Pmm855au
Qualcomm Pmm855au_firmware

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-11242?: CVE-2020-11242 is a high-severity vulnerability in Qualcomm Pm660. CVSS score: 8.4/10. Published 2021-04-07.
How severe is CVE-2020-11242?: High severity. CVSS v3 base score is 8.4 out of 10.