CVE-2020-11265

moderate-risk

Published 2021-06-09

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Ar7420 Firmware

Ar9580 Firmware

Csr8811 Firmware

Ipq4018 Firmware

Ipq4019 Firmware

Ipq4028 Firmware

Ipq4029 Firmware

Qca10901 Firmware

Qca4024 Firmware

Qca7500 Firmware

Qca7520 Firmware

Qca7550 Firmware

Qca8075 Firmware

Qca9880 Firmware

Qca9886 Firmware

Qca9888 Firmware

Qca9889 Firmware

Qca9898 Firmware

Qca9984 Firmware

Qca9992 Firmware

Qualcomm

Vendor Advisory https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulleti...

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 21/34 · High