CVE-2020-11254 : Memory corruption during buffer allocation due to dereferencing session ctx poin

Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Published 2021-05-07 09:15:08

Updated 2021-05-14 16:15:00

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2020-11254

Qualcomm » Qca6574au » Version: N/A
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa6155p » Version: N/A
cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smb1351 » Version: N/A
cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9341 » Version: N/A
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn3990 » Version: N/A
cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn6850 » Version: N/A
cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn6851 » Version: N/A
cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn6855 » Version: N/A
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn6856 » Version: N/A
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa8155p » Version: N/A
cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa6145p » Version: N/A
cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa6150p » Version: N/A
cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa8150p » Version: N/A
cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sa8195p » Version: N/A
cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm6150a » Version: N/A
cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm6150l » Version: N/A
cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm6350 » Version: N/A
cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm660 » Version: N/A
cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm660l » Version: N/A
cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm7250b » Version: N/A
cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8008 » Version: N/A
cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8009 » Version: N/A
cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8350 » Version: N/A
cpe:2.3:h:qualcomm:pm8350:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8350b » Version: N/A
cpe:2.3:h:qualcomm:pm8350b:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8350bh » Version: N/A
cpe:2.3:h:qualcomm:pm8350bh:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pm8350c » Version: N/A
cpe:2.3:h:qualcomm:pm8350c:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmk8003 » Version: N/A
cpe:2.3:h:qualcomm:pmk8003:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmk8350 » Version: N/A
cpe:2.3:h:qualcomm:pmk8350:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmm6155au » Version: N/A
cpe:2.3:h:qualcomm:pmm6155au:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmm8155au » Version: N/A
cpe:2.3:h:qualcomm:pmm8155au:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmm8195au » Version: N/A
cpe:2.3:h:qualcomm:pmm8195au:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmr735a » Version: N/A
cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Pmr735b » Version: N/A
cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat3516 » Version: N/A
cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat3518 » Version: N/A
cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat3519 » Version: N/A
cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat3555 » Version: N/A
cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat5515 » Version: N/A
cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat5516 » Version: N/A
cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat5522 » Version: N/A
cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qat5568 » Version: N/A
cpe:2.3:h:qualcomm:qat5568:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qbt1500 » Version: N/A
cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qca6696 » Version: N/A
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm3301 » Version: N/A
cpe:2.3:h:qualcomm:qdm3301:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm4643 » Version: N/A
cpe:2.3:h:qualcomm:qdm4643:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm4650 » Version: N/A
cpe:2.3:h:qualcomm:qdm4650:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm5620 » Version: N/A
cpe:2.3:h:qualcomm:qdm5620:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm5621 » Version: N/A
cpe:2.3:h:qualcomm:qdm5621:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm5670 » Version: N/A
cpe:2.3:h:qualcomm:qdm5670:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qdm5671 » Version: N/A
cpe:2.3:h:qualcomm:qdm5671:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qet5100 » Version: N/A
cpe:2.3:h:qualcomm:qet5100:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qet5100m » Version: N/A
cpe:2.3:h:qualcomm:qet5100m:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qet6100 » Version: N/A
cpe:2.3:h:qualcomm:qet6100:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qet6110 » Version: N/A
cpe:2.3:h:qualcomm:qet6110:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qfs2530 » Version: N/A
cpe:2.3:h:qualcomm:qfs2530:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qfs2580 » Version: N/A
cpe:2.3:h:qualcomm:qfs2580:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qfs2608 » Version: N/A
cpe:2.3:h:qualcomm:qfs2608:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qfs2630 » Version: N/A
cpe:2.3:h:qualcomm:qfs2630:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qln4642 » Version: N/A
cpe:2.3:h:qualcomm:qln4642:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qln4650 » Version: N/A
cpe:2.3:h:qualcomm:qln4650:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qln5020 » Version: N/A
cpe:2.3:h:qualcomm:qln5020:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qln5030 » Version: N/A
cpe:2.3:h:qualcomm:qln5030:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qln5040 » Version: N/A
cpe:2.3:h:qualcomm:qln5040:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa2625 » Version: N/A
cpe:2.3:h:qualcomm:qpa2625:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa5461 » Version: N/A
cpe:2.3:h:qualcomm:qpa5461:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa5580 » Version: N/A
cpe:2.3:h:qualcomm:qpa5580:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa5581 » Version: N/A
cpe:2.3:h:qualcomm:qpa5581:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa8801 » Version: N/A
cpe:2.3:h:qualcomm:qpa8801:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa8802 » Version: N/A
cpe:2.3:h:qualcomm:qpa8802:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa8803 » Version: N/A
cpe:2.3:h:qualcomm:qpa8803:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa8821 » Version: N/A
cpe:2.3:h:qualcomm:qpa8821:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpa8842 » Version: N/A
cpe:2.3:h:qualcomm:qpa8842:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm4621 » Version: N/A
cpe:2.3:h:qualcomm:qpm4621:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm4630 » Version: N/A
cpe:2.3:h:qualcomm:qpm4630:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm4640 » Version: N/A
cpe:2.3:h:qualcomm:qpm4640:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm4641 » Version: N/A
cpe:2.3:h:qualcomm:qpm4641:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm4650 » Version: N/A
cpe:2.3:h:qualcomm:qpm4650:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5621 » Version: N/A
cpe:2.3:h:qualcomm:qpm5621:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5641 » Version: N/A
cpe:2.3:h:qualcomm:qpm5641:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5670 » Version: N/A
cpe:2.3:h:qualcomm:qpm5670:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5677 » Version: N/A
cpe:2.3:h:qualcomm:qpm5677:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5679 » Version: N/A
cpe:2.3:h:qualcomm:qpm5679:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5870 » Version: N/A
cpe:2.3:h:qualcomm:qpm5870:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm5875 » Version: N/A
cpe:2.3:h:qualcomm:qpm5875:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm6585 » Version: N/A
cpe:2.3:h:qualcomm:qpm6585:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm6621 » Version: N/A
cpe:2.3:h:qualcomm:qpm6621:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm6670 » Version: N/A
cpe:2.3:h:qualcomm:qpm6670:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm8820 » Version: N/A
cpe:2.3:h:qualcomm:qpm8820:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qpm8870 » Version: N/A
cpe:2.3:h:qualcomm:qpm8870:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qtc800h » Version: N/A
cpe:2.3:h:qualcomm:qtc800h:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qtc800s » Version: N/A
cpe:2.3:h:qualcomm:qtc800s:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qtc801s » Version: N/A
cpe:2.3:h:qualcomm:qtc801s:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qtm525 » Version: N/A
cpe:2.3:h:qualcomm:qtm525:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sd670 » Version: N/A
cpe:2.3:h:qualcomm:sd670:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sd710 » Version: N/A
cpe:2.3:h:qualcomm:sd710:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sd888 5g » Version: N/A
cpe:2.3:h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdr660 » Version: N/A
cpe:2.3:h:qualcomm:sdr660:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdr660g » Version: N/A
cpe:2.3:h:qualcomm:sdr660g:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdr735 » Version: N/A
cpe:2.3:h:qualcomm:sdr735:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdr735g » Version: N/A
cpe:2.3:h:qualcomm:sdr735g:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdr865 » Version: N/A
cpe:2.3:h:qualcomm:sdr865:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sdxr1 » Version: N/A
cpe:2.3:h:qualcomm:sdxr1:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smb1355 » Version: N/A
cpe:2.3:h:qualcomm:smb1355:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smb1396 » Version: N/A
cpe:2.3:h:qualcomm:smb1396:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smb1398 » Version: N/A
cpe:2.3:h:qualcomm:smb1398:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smr526 » Version: N/A
cpe:2.3:h:qualcomm:smr526:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smr545 » Version: N/A
cpe:2.3:h:qualcomm:smr545:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Smr546 » Version: N/A
cpe:2.3:h:qualcomm:smr546:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9326 » Version: N/A
cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9370 » Version: N/A
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9375 » Version: N/A
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9380 » Version: N/A
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcd9385 » Version: N/A
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn3980 » Version: N/A
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn3988 » Version: N/A
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wcn3991 » Version: N/A
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wsa8830 » Version: N/A
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Wsa8835 » Version: N/A
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sd480 » Version: N/A
cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Qet6105 » Version: N/A
cpe:2.3:h:qualcomm:qet6105:-:*:*:*:*:*:*:*
Matching versions
Qualcomm » Sd888 » Version: N/A
cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-11254

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-11254

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.2	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.5	3.6	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-11254

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-11254

https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

May 2021 Security Bulletin | Qualcomm
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-11254

Products affected by CVE-2020-11254

Exploit prediction scoring system (EPSS) score for CVE-2020-11254

CVSS scores for CVE-2020-11254

CWE ids for CVE-2020-11254

References for CVE-2020-11254