CVE-2020-11257

moderate-risk

Published 2021-06-09

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

LOCAL / LOW complexity

Ar7420 Firmware

Ar9580 Firmware

Csr8811 Firmware

Ipq4018 Firmware

Ipq4019 Firmware

Ipq4028 Firmware

Ipq4029 Firmware

Qca10901 Firmware

Qca4024 Firmware

Qca7500 Firmware

Qca7520 Firmware

Qca7550 Firmware

Qca8075 Firmware

Qca9880 Firmware

Qca9886 Firmware

Qca9888 Firmware

Qca9889 Firmware

Qca9898 Firmware

Qca9984 Firmware

Qca9992 Firmware

Qualcomm

Vendor Advisory https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulleti...

/ 100

moderate-risk

Severity 27/34 · High

Exploitability 0/34 · Minimal

Exposure 21/34 · High