PT-2021-9264 · Qualcomm · Snapdragon Mobile+3

Published 2021-05-07 · Updated 2021-05-14 · CVE-2020-11254

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to memory corruption during buffer allocation. This occurs due to dereferencing a session context pointer without checking if the pointer is valid. The affected components include Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, and Snapdragon Mobile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-11254

Affected Products

Snapdragon Auto

Snapdragon Compute

Snapdragon Connectivity

Snapdragon Mobile

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-11254 · Security Note
• https://qualcomm.com/company/product-security/bulletins/may-2021-bulletin · Vendor Advisory
• https://t.me/cvenotify/14450 · Telegram Post