{"id":"CVE-2020-11242","aliases":["EUVD-2020-3596","GHSA-94mw-4r68-8h9f"],"status":"published","title":"User could gain access to secure memory due to incorrect argument into address range validation...","description":"User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00202,"percentile":0.10276,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-04-07T07:55:31Z","modified":"2026-06-17T02:49:44Z","products":[{"vendor":"qualcomm","product":"pm660_firmware"},{"vendor":"qualcomm","product":"pm660a_firmware"},{"vendor":"qualcomm","product":"pm660l_firmware"},{"vendor":"qualcomm","product":"pm855a_firmware"},{"vendor":"qualcomm","product":"pmm855au_firmware"},{"vendor":"qualcomm","product":"qat3514_firmware"},{"vendor":"qualcomm","product":"qat3522_firmware"},{"vendor":"qualcomm","product":"qat3550_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qet4100_firmware"},{"vendor":"qualcomm","product":"qet4101_firmware"},{"vendor":"qualcomm","product":"qet4200aq_firmware"},{"vendor":"qualcomm","product":"qln1021aq_firmware"},{"vendor":"qualcomm","product":"qln1031_firmware"},{"vendor":"qualcomm","product":"qln1036aq_firmware"},{"vendor":"qualcomm","product":"qpa4340_firmware"},{"vendor":"qualcomm","product":"qpa4360_firmware"},{"vendor":"qualcomm","product":"qpa5460_firmware"},{"vendor":"qualcomm","product":"qtc800h_firmware"},{"vendor":"qualcomm","product":"qtc800s_firmware"},{"vendor":"qualcomm","product":"rsw8577_firmware"},{"vendor":"qualcomm","product":"sd455_firmware"},{"vendor":"qualcomm","product":"sd636_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sdm630_firmware"},{"vendor":"qualcomm","product":"sdr660_firmware"},{"vendor":"qualcomm","product":"smb1351_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon industrial iot, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11242"},{"url":"https://github.com/advisories/GHSA-94mw-4r68-8h9f"}],"sources":{"cve":[{"id":"CVE-2020-11242","description":"User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-04-07T07:55:31Z","modified":"2024-08-04T11:28:13.846Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-3596","description":"User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-04-07T07:55:31Z","modified":"2024-08-04T11:28:13Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-94mw-4r68-8h9f","title":"User could gain access to secure memory due to incorrect argument into address range validation...","description":"User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2022-05-24T17:46:43Z","modified":"2023-01-29T05:06:20Z","updated_at":"2026-11-02T14:46:00.036476Z"}],"nvd":[{"id":"CVE-2020-11242","description":"User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile","status":"published","published":"2021-04-07T08:15:14.097Z","modified":"2026-06-17T02:49:44.503Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}