CVE-2020-11217

CVSS V2 Medium 4.6 CVSS V3 High 7.8
Description
A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Overview
  • CVE ID
  • CVE-2020-11217
  • Assigner
  • product-security@qualcomm.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2021-01-21T10:15:14
  • Last Modified Date
  • 2021-01-29T20:28:44
Weakness Enumerations
CWE URL
CWE-415 http://cwe.mitre.org/data/definitions/415.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm4125:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm7350c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8150a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8150b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8150c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8150l:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8250:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8350b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8350bh:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8350bhs:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pm8350c:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmi632:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmk7350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmk8002:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmk8003:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmk8350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmr525:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:pmx55:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat5533:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qat5568:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qbt2000:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm2301:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm2305:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm2307:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm2308:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm2310:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm3301:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm3302:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm4643:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm4650:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5579:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5620:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5621:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5650:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5652:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5670:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5671:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5677:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qdm5679:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet4100:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet4101:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet5100:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet5100m:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet6100:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qet6110:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qfs2530:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qfs2580:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qfs2608:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qfs2630:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qln4642:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qln4650:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qln5020:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qln5030:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qln5040:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa2625:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa4340:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa4360:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa5461:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa5580:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa5581:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa6560:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8673:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8686:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8801:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8802:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8803:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8821:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpa8842:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm4621:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm4630:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm4640:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm4641:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm4650:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5620:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5621:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5641:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5657:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5658:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5670:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5677:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5679:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5870:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm5875:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm6582:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm6585:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm6621:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm6670:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm8820:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm8830:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm8870:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qpm8895:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qsm7250:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qtc800h:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qtc800s:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qtc801s:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:qtm525:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:rsw8577:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd460:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd662:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd6905g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd750g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd765:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd765g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd768g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd8655g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sd8885g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr425:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr660:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr735:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr735g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr8250:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdr865:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdx55m:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sdxr25g:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sm4125:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sm4350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:sm7350:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1354:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1355:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1390:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1394:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1395:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1396:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smb1398:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smr525:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smr526:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smr545:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:smr546:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wgr7640:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wtr2965:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:qualcomm:wtr3925:-:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 4.6
  • Severity
  • MEDIUM
  • Exploitability Score
  • 3.9
  • Impact Score
  • 6.4
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • LOW
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 7.8
  • Base Severity
  • HIGH
  • Exploitability Score
  • 1.8
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2020-11217
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11217
History
Created Old Value New Value Data Type Notes
2022-05-10 07:25:28 Added to TrackCVE
2022-12-05 20:43:51 security.cna@qualcomm.com product-security@qualcomm.com CVE Assigner updated
2022-12-05 20:43:51 2021-01-21T10:15Z 2021-01-21T10:15:14 CVE Published Date updated
2022-12-05 20:43:51 2021-01-29T20:28:44 CVE Modified Date updated
2022-12-05 20:43:51 Analyzed Vulnerability Status updated