What’s Vulnerable › Vulnerabilities

CVE-2020-11242

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-07 · updated 2026-06-17

Description

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm Pm660 Firmware: all versions
• Qualcomm Pm660A Firmware: all versions
• Qualcomm Pm660L Firmware: all versions
• Qualcomm Pm855A Firmware: all versions
• Qualcomm Pmm855Au Firmware: all versions
• Qualcomm Qat3514 Firmware: all versions
• Qualcomm Qat3522 Firmware: all versions
• Qualcomm Qat3550 Firmware: all versions
• Qualcomm Qca6564A Firmware: all versions
• Qualcomm Qca6564Au Firmware: all versions
• Qualcomm Qca6574A Firmware: all versions
• Qualcomm Qca6574Au Firmware: all versions
• Qualcomm Qca6595 Firmware: all versions
• Qualcomm Qca6595Au Firmware: all versions
• Qualcomm Qet4100 Firmware: all versions
• Qualcomm Qet4101 Firmware: all versions
• Qualcomm Qet4200Aq Firmware: all versions
• Qualcomm Qln1021Aq Firmware: all versions
• Qualcomm Qln1031 Firmware: all versions
• Qualcomm Qln1036Aq Firmware: all versions
• Qualcomm Qpa4340 Firmware: all versions
• Qualcomm Qpa4360 Firmware: all versions
• Qualcomm Qpa5460 Firmware: all versions
• Qualcomm Qtc800H Firmware: all versions
• Qualcomm Qtc800S Firmware: all versions
• Qualcomm Rsw8577 Firmware: all versions
• Qualcomm Sd455 Firmware: all versions
• Qualcomm Sd636 Firmware: all versions
• Qualcomm Sd660 Firmware: all versions
• Qualcomm Sdm630 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Get alerted when CVE-2020-11242 or the next vulnerability affects your stack