PT-2021-9183 · Qualcomm · Qualcomm Snapdragon

Published 2021-01-21 · Updated 2021-01-28 · CVE-2020-11138

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon (affected versions not specified)

Description The issue arises from uninitialized pointers being accessed during music playback, which is caused by an uninitialized heap memory resulting in an incorrect bit stream. This leads to instability in various Snapdragon products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

CVE-2020-11138

Affected Products

Qualcomm Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11138 · Security Note
• https://qualcomm.com/company/product-security/bulletins/december-2020-bulletin · Note