ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-11284

—
CVSS 3.1
7.8 high
EPSS
<1%p5
Published
()
Modified
Description

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendors
qualcomm
Products
aqt1000 firmware, ar8035 firmware, pm3003a firmware, pm4125 firmware, pm4250 firmware, pm6125 firmware, pm6150 firmware, pm6150a firmware, pm6150l firmware, pm6350 firmware, pm640a firmware, pm640l firmware
Weakness
CWE-667
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.