1. Home
  2. Vulnerabilities
  3. CVE-2020-11286
6.8
MEDIUM CVSS 3.1
CVE-2020-11286
Snapdragon Pointer Dereference Vulnerability
Overview
Description

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Details
INFO

Published Date :

Feb. 22, 2021, 7:15 a.m.

Last Modified :

June 17, 2026, 2:49 a.m.

Remotely Exploit :

No

Source :

[email protected]
Impact
Affected Products

The following products are affected by CVE-2020-11286 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Qualcomm qca6574au_firmware
2 Qualcomm qca6310_firmware
3 Qualcomm qca6564au_firmware
4 Qualcomm qca6574_firmware
5 Qualcomm qca6574a_firmware
6 Qualcomm qca6584au_firmware
7 Qualcomm sd660_firmware
8 Qualcomm msm8996au_firmware
9 Qualcomm apq8096au_firmware
10 Qualcomm mdm9628_firmware
11 Qualcomm qca6564a_firmware
12 Qualcomm qca6174a_firmware
13 Qualcomm qca9377_firmware
14 Qualcomm apq8009_firmware
15 Qualcomm apq8009w_firmware
16 Qualcomm apq8064au_firmware
17 Qualcomm mdm9250_firmware
18 Qualcomm mdm9650_firmware
19 Qualcomm msm8909w_firmware
20 Qualcomm sd210_firmware
21 Qualcomm sd835_firmware
22 Qualcomm sdw2500_firmware
23 Qualcomm sdx20_firmware
24 Qualcomm sdx20m_firmware
25 Qualcomm apq8076_firmware
26 Qualcomm qca6320_firmware
27 Qualcomm sd205_firmware
28 Qualcomm apq8017_firmware
29 Qualcomm mdm9206_firmware
30 Qualcomm mdm9607_firmware
31 Qualcomm qca9367_firmware
32 Qualcomm mdm9330_firmware
33 Qualcomm mdm9640_firmware
34 Qualcomm wcd9306_firmware
35 Qualcomm qca6174_firmware
36 Qualcomm sd820_firmware
37 Qualcomm sd821_firmware
38 Qualcomm qet4101_firmware
39 Qualcomm qsw8573_firmware
40 Qualcomm qca6584_firmware
41 Qualcomm sd_636_firmware
42 Qualcomm mdm9655_firmware
43 Qualcomm sdm630_firmware
44 Qualcomm apq8053_firmware
45 Qualcomm msm8937_firmware
46 Qualcomm mdm9626_firmware
47 Qualcomm pm8937_firmware
48 Qualcomm mdm9230_firmware
49 Qualcomm mdm9630_firmware
50 Qualcomm csr6030_firmware
51 Qualcomm ar8151_firmware
52 Qualcomm pm660_firmware
53 Qualcomm pm660a_firmware
54 Qualcomm pm660l_firmware
55 Qualcomm pm8004_firmware
56 Qualcomm pm8005_firmware
57 Qualcomm pm8909_firmware
58 Qualcomm pm8916_firmware
59 Qualcomm pm8952_firmware
60 Qualcomm pm8953_firmware
61 Qualcomm pm8956_firmware
62 Qualcomm pm8998_firmware
63 Qualcomm pmd9607_firmware
64 Qualcomm pmd9635_firmware
65 Qualcomm pmd9645_firmware
66 Qualcomm pmd9655_firmware
67 Qualcomm pmi8937_firmware
68 Qualcomm pmi8952_firmware
69 Qualcomm pmi8998_firmware
70 Qualcomm pmm8996au_firmware
71 Qualcomm pmx20_firmware
72 Qualcomm qat3514_firmware
73 Qualcomm qat3522_firmware
74 Qualcomm qat3550_firmware
75 Qualcomm qbt1000_firmware
76 Qualcomm qbt1500_firmware
77 Qualcomm qet4100_firmware
78 Qualcomm qet4200aq_firmware
79 Qualcomm qfe1035_firmware
80 Qualcomm qfe1040_firmware
81 Qualcomm qfe1045_firmware
82 Qualcomm qfe2340_firmware
83 Qualcomm qfe2550_firmware
84 Qualcomm qfe3100_firmware
85 Qualcomm qfe3320_firmware
86 Qualcomm qfe3335_firmware
87 Qualcomm qfe3345_firmware
88 Qualcomm qln1021aq_firmware
89 Qualcomm qln1030_firmware
90 Qualcomm qln1031_firmware
91 Qualcomm qln1036aq_firmware
92 Qualcomm qpa4340_firmware
93 Qualcomm qpa4360_firmware
94 Qualcomm qpa5460_firmware
95 Qualcomm qtc800h_firmware
96 Qualcomm qtc800s_firmware
97 Qualcomm qtc800t_firmware
98 Qualcomm rgr7640au_firmware
99 Qualcomm rsw8577_firmware
100 Qualcomm sdr660_firmware
101 Qualcomm sdw3100_firmware
102 Qualcomm smb1351_firmware
103 Qualcomm smb1357_firmware
104 Qualcomm smb1358_firmware
105 Qualcomm smb1360_firmware
106 Qualcomm smb1380_firmware
107 Qualcomm smb231_firmware
108 Qualcomm smb358s_firmware
109 Qualcomm pm8996_firmware
110 Qualcomm pmi8994_firmware
111 Qualcomm pmi8996_firmware
112 Qualcomm pmk8001_firmware
113 Qualcomm smb1350_firmware
114 Qualcomm apq8009
115 Qualcomm apq8009w
116 Qualcomm apq8017
117 Qualcomm apq8053
118 Qualcomm apq8064au
119 Qualcomm apq8076
120 Qualcomm apq8096au
121 Qualcomm ar8151
122 Qualcomm mdm9206
123 Qualcomm mdm9230
124 Qualcomm mdm9330
125 Qualcomm mdm9607
126 Qualcomm mdm9628
127 Qualcomm mdm9630
128 Qualcomm mdm9640
129 Qualcomm mdm9650
130 Qualcomm mdm9655
131 Qualcomm msm8909w
132 Qualcomm msm8937
133 Qualcomm msm8996au
134 Qualcomm pm660
135 Qualcomm pm660a
136 Qualcomm pm660l
137 Qualcomm pm8004
138 Qualcomm pm8005
139 Qualcomm pm8909
140 Qualcomm pm8916
141 Qualcomm pm8937
142 Qualcomm pm8952
143 Qualcomm pm8953
144 Qualcomm pm8956
145 Qualcomm pm8996
146 Qualcomm pm8998
147 Qualcomm pmd9607
148 Qualcomm pmd9635
149 Qualcomm pmd9645
150 Qualcomm pmd9655
151 Qualcomm pmi8937
152 Qualcomm pmi8952
153 Qualcomm pmi8994
154 Qualcomm pmi8996
155 Qualcomm pmi8998
156 Qualcomm pmk8001
157 Qualcomm pmm8996au
158 Qualcomm qat3514
159 Qualcomm qat3522
160 Qualcomm qat3550
161 Qualcomm qbt1000
162 Qualcomm qbt1500
163 Qualcomm qca6174
164 Qualcomm qca6174a
165 Qualcomm qca6310
166 Qualcomm qca6320
167 Qualcomm qca6564a
168 Qualcomm qca6564au
169 Qualcomm qca6574
170 Qualcomm qca6574a
171 Qualcomm qca6574au
172 Qualcomm qca6584
173 Qualcomm qca6584au
174 Qualcomm qet4100
175 Qualcomm qet4101
176 Qualcomm qet4200aq
177 Qualcomm qfe1040
178 Qualcomm qfe1045
179 Qualcomm qfe2340
180 Qualcomm qfe2550
181 Qualcomm qfe3100
182 Qualcomm qfe3320
183 Qualcomm qfe3335
184 Qualcomm qfe3345
185 Qualcomm qln1021aq
186 Qualcomm qln1030
187 Qualcomm qln1031
188 Qualcomm qln1036aq
189 Qualcomm qpa4340
190 Qualcomm qpa4360
191 Qualcomm qpa5460
192 Qualcomm qsw8573
193 Qualcomm qtc800h
194 Qualcomm qtc800s
195 Qualcomm qtc800t
196 Qualcomm rgr7640au
197 Qualcomm rsw8577
198 Qualcomm sd_636
199 Qualcomm sd205
200 Qualcomm sd210
201 Qualcomm sd660
202 Qualcomm sd820
203 Qualcomm sd821
204 Qualcomm sd835
205 Qualcomm sdm630
206 Qualcomm sdr660
207 Qualcomm sdw3100
208 Qualcomm smb1350
209 Qualcomm smb1351
210 Qualcomm smb1357
211 Qualcomm smb1358
212 Qualcomm smb1360
213 Qualcomm smb1380
214 Qualcomm smb231
215 Qualcomm wcd9306
216 Qualcomm wcd9326
217 Qualcomm wcd9330
218 Qualcomm wcd9335
219 Qualcomm wcd9340
220 Qualcomm wcd9341
221 Qualcomm wcn3610
222 Qualcomm wcn3615
223 Qualcomm wcn3620
224 Qualcomm wcn3660b
225 Qualcomm wcn3680b
226 Qualcomm wcn3980
227 Qualcomm wcn3990
228 Qualcomm wgr7640
229 Qualcomm wsa8810
230 Qualcomm wsa8815
231 Qualcomm wtr2955
232 Qualcomm wtr2965
233 Qualcomm wtr3905
234 Qualcomm wtr3925
235 Qualcomm wtr3950
236 Qualcomm wtr4905
237 Qualcomm wtr5975
238 Qualcomm csr6030
239 Qualcomm mdm9250
240 Qualcomm pmx20
241 Qualcomm qca9367
242 Qualcomm qca9377
243 Qualcomm qfe1035
244 Qualcomm sdw2500
245 Qualcomm sdx20
246 Qualcomm smb358s
247 Qualcomm sdx20m
248 Qualcomm mdm9626
: Total Affected Vendor : 1 | Products : 248
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 2.0 MEDIUM [email protected]
CVSS 3.1 MEDIUM [email protected]
References
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-11286.

URL Resource
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch Vendor Advisory
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-11286 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-11286 weaknesses.

CAPEC-8: Buffer Overflow in an API Call Buffer Overflow in an API Call CAPEC-9: Buffer Overflow in Local Command-Line Utilities Buffer Overflow in Local Command-Line Utilities CAPEC-10: Buffer Overflow via Environment Variables Buffer Overflow via Environment Variables CAPEC-14: Client-side Injection-induced Buffer Overflow Client-side Injection-induced Buffer Overflow CAPEC-24: Filter Failure through Buffer Overflow Filter Failure through Buffer Overflow CAPEC-42: MIME Conversion MIME Conversion CAPEC-44: Overflow Binary Resource File Overflow Binary Resource File CAPEC-45: Buffer Overflow via Symbolic Links Buffer Overflow via Symbolic Links CAPEC-46: Overflow Variables and Tags Overflow Variables and Tags CAPEC-47: Buffer Overflow via Parameter Expansion Buffer Overflow via Parameter Expansion CAPEC-100: Overflow Buffers Overflow Buffers CAPEC-123: Buffer Manipulation Buffer Manipulation

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-11286 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2020-11286 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    Jun. 17, 2026

    Action Type Old Value New Value
    Added Affected [{'vendor': 'Qualcomm, Inc.', 'product': 'Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables', 'versions': [{'status': 'affected', 'version': 'APQ8009, APQ8009W, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8096AU, AR8151, CSR6030, MDM9206, MDM9230, MDM9250, MDM9330, MDM9607, MDM9626, MDM9628, MDM9630, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8937, MSM8996AU, PM660, PM660A, PM660L, PM8004, PM8005, PM8909, PM8916, PM8937, PM8952, PM8953, PM8956, PM8996, PM8998, PMD9607, PMD9635, PMD9645, PMD9655, PMI8937, PMI8952, PMI8994, PMI8996, PMI8998, PMK8001, PMM8996AU, PMX20, QAT3514, QAT3522, QAT3550, QBT1000, QBT1500, QCA6174, QCA6174A, QCA6310, QCA6320, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584, QCA6584AU, QCA9367, QCA9377, QET4100, QET4101, QET4200AQ, QFE1035, QFE1040, QFE1045, QFE2340, QFE2550, QFE3100, QFE3320, QFE3335, QFE3345, QLN1021AQ, QLN1030, QLN1031, QLN1036AQ, QPA4340, QPA4360, QPA5460, QSW8573, QTC800H, QTC800S, QTC800T, RGR7640AU, RSW8577, SD 636, SD205, SD210, SD660, SD820, SD821, SD835, SDM630, SDR660, SDW2500, SDW3100, SDX20, SDX20M, SMB1350, SMB1351, SMB1357, SMB1358, SMB1360, SMB1380, SMB231, SMB358S, WCD9306, ...[truncated*]'}]}]
  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CWE Remap by [email protected]

    Jul. 21, 2021

    Action Type Old Value New Value
    Changed CWE CWE-476 CWE-119
  • Initial Analysis by [email protected]

    Feb. 26, 2021

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin No Types Assigned https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin Patch, Vendor Advisory
    Added CWE NIST CWE-476
    Added CPE Configuration OR *cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:ar8151:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:csr6030:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9230:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9330:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9626:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9630:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8004:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8909:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8916:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8937:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8952:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8953:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8956:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8996:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pm8998:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmd9607:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmd9635:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmd9645:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmd9655:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmi8937:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmi8952:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmi8994:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmi8996:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmi8998:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmk8001:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmm8996au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:pmx20:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qbt1000:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qet4100:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qet4101:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qet4200aq:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe1035:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe1040:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe1045:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe2340:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe2550:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe3100:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe3320:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe3335:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qfe3345:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qln1021aq:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qln1030:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qln1031:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qln1036aq:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qpa4340:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qpa4360:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qpa5460:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qsw8573:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qtc800h:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qtc800s:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:qtc800t:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:rgr7640au:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:rsw8577:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdr660:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdw2500:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdw3100:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:sdx20m:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1350:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1357:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1358:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1360:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb1380:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb231:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:smb358s:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9306:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9330:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wgr7640:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr2955:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr2965:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr3905:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr3925:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr3950:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr4905:-:*:*:*:*:*:*:* *cpe:2.3:h:qualcomm:wtr5975:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS
Vulnerability Scoring Details
Base CVSS Score: 6.8
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Base CVSS Score: 4.6
Access Vector
Access Complexity
Authentication
Confidentiality Impact
Integrity Impact
Availability Impact
EPSS
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.17 }} 0.02%

score

0.07049

percentile