CVE-2020-11242
User could gain access to secure memory due to incorrect argument into address range validation...
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
- Record
CVE-2020-11242- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2020-3596
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
- Record
EUVD-2020-3596- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-94mw-4r68-8h9f No score
User could gain access to secure memory due to incorrect argument into address range validation...
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
- Record
GHSA-94mw-4r68-8h9f- Updated
- 2026-11-02
NVD
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
- Record
CVE-2020-11242- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile
- qualcomm pm660 firmware
- qualcomm pm660a firmware
- qualcomm pm660l firmware
- qualcomm pm855a firmware
- qualcomm pmm855au firmware
- qualcomm qat3514 firmware
- qualcomm qat3522 firmware
- qualcomm qat3550 firmware
- qualcomm qca6564a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574a firmware
Show 27 moreShow less
- qualcomm qca6574au firmware
- qualcomm qca6595 firmware
- qualcomm qca6595au firmware
- qualcomm qet4100 firmware
- qualcomm qet4101 firmware
- qualcomm qet4200aq firmware
- qualcomm qln1021aq firmware
- qualcomm qln1031 firmware
- qualcomm qln1036aq firmware
- qualcomm qpa4340 firmware
- qualcomm qpa4360 firmware
- qualcomm qpa5460 firmware
- qualcomm qtc800h firmware
- qualcomm qtc800s firmware
- qualcomm rsw8577 firmware
- qualcomm sd455 firmware
- qualcomm sd636 firmware
- qualcomm sd660 firmware
- qualcomm sdm630 firmware
- qualcomm sdr660 firmware
- qualcomm smb1351 firmware
- qualcomm wcd9335 firmware
- qualcomm wcd9340 firmware
- qualcomm wcd9341 firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3990 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11242 is a high vulnerability (CVSS 8.4) in Qualcomm, Inc. Snapdragon Industrial Iot, Snapdragon Mobile, published April 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. No source names a fixed version.