Vulnerability-Lookup

WID-SEC-W-2022-1994

Vulnerability from csaf_certbund - Published: 2021-01-04 23:00 - Updated: 2024-05-30 22:00

Summary

Google Android Patchday Januar

Severity

Kritisch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.

Betroffene Betriebssysteme: - Android

CVE-2016-6328

In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten "Framework", "Media Framework", "System", "Kernel components", "MediaTek components", "Qualcomm components" sowie "Qualcomm closed-source components". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen.

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2019-9376

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-0471

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-10732

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-10766

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11126

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11134

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11159

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11160

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11161

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11181

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11182

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11233

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11235

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11238

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11239

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11240

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11241

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11250

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11260

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11261

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-11262

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-15999

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2020-27059

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0301

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0303

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0304

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0306

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0307

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0308

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0309

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0310

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0311

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0312

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0313

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0315

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0316

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0317

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0318

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0319

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0320

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0321

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0322

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0323

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

CVE-2021-0342

Affected products

Known affected 10 products

Product	Identifier	Version
Google Android 8.0 Google / Android	`cpe:/o:google:android:8.0`	8
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Google Android 11 Google / Android	`cpe:/o:google:android:11.0`	11
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
BlackBerry BlackBerry RIM	`cpe:/h:rim:blackberry:-`	—
Google Android 9 Google / Android	`cpe:/o:google:android:9`	9
Open Source Arch Linux Open Source	`cpe:/o:archlinux:archlinux:-`	—
Google Android 10 Google / Android	`cpe:/o:google:android:10.0`	10
Google Android 8.1 Google / Android	`cpe:/o:google:android:8.1`	8.1

References

16 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://thehackernews.com/2021/03/warning-new-and…	external
https://source.android.com/security/bulletin/2021-01-01	external
https://source.android.com/security/bulletin/pixe…	external
https://lgsecurity.lge.com/security_updates_mobile.html	external
https://security.samsungmobile.com/securityUpdate.smsb	external
https://security.archlinux.org/ASA-202101-34/generate	external
http://support.blackberry.com/kb/articleDetail?la…	external
https://lists.debian.org/debian-lts-announce/2021…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2022:7700	external
https://access.redhat.com/errata/RHSA-2024:3486	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Android Betriebssystem von Google ist eine quelloffene Plattform f\u00fcr mobile Ger\u00e4te. Die Basis bildet der Linux-Kernel.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herbeizuf\u00fchren oder Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Android",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-1994 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-1994.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-1994 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1994"
      },
      {
        "category": "external",
        "summary": "Artikel auf the Hackernews vom 2021-03-22",
        "url": "https://thehackernews.com/2021/03/warning-new-android-zero-day.html"
      },
      {
        "category": "external",
        "summary": "Android Patchday Januar vom 2021-01-04",
        "url": "https://source.android.com/security/bulletin/2021-01-01"
      },
      {
        "category": "external",
        "summary": "Google Pixel Patchday Januar vom 2021-01-04",
        "url": "https://source.android.com/security/bulletin/pixel/2021-01-01"
      },
      {
        "category": "external",
        "summary": "LG Security Bulletin SMR-JAN-2021",
        "url": "https://lgsecurity.lge.com/security_updates_mobile.html"
      },
      {
        "category": "external",
        "summary": "Samsung Security Updates SMR-JAN-2021",
        "url": "https://security.samsungmobile.com/securityUpdate.smsb"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-202101-34 vom 2021-01-22",
        "url": "https://security.archlinux.org/ASA-202101-34/generate"
      },
      {
        "category": "external",
        "summary": "BlackBerry Powered by Android Security Bulletin - January 2021",
        "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000073450"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2549 vom 2021-02-08",
        "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0353-1 vom 2021-02-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-February/008290.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0354-1 vom 2021-02-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-February/008292.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0532-1 vom 2021-02-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0859-1 vom 2021-03-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7700 vom 2022-11-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:7700"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:3486 vom 2024-05-30",
        "url": "https://access.redhat.com/errata/RHSA-2024:3486"
      }
    ],
    "source_lang": "en-US",
    "title": "Google Android Patchday Januar",
    "tracking": {
      "current_release_date": "2024-05-30T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:37:47.726+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-1994",
      "initial_release_date": "2021-01-04T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-01-04T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-01-21T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Arch Linux aufgenommen"
        },
        {
          "date": "2021-01-24T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von BLACKBERRY aufgenommen"
        },
        {
          "date": "2021-02-07T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-02-09T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-02-21T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-03-17T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-03-22T23:00:00.000+00:00",
          "number": "8",
          "summary": "Ausnutzung gemeldet"
        },
        {
          "date": "2022-11-08T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-05-30T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "10"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Google Android 8.0",
                  "product_id": "344177",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:8.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.1",
                "product": {
                  "name": "Google Android 8.1",
                  "product_id": "407131",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:8.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "10",
                "product": {
                  "name": "Google Android 10",
                  "product_id": "560061",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:10.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "11",
                "product": {
                  "name": "Google Android 11",
                  "product_id": "813964",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:11.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "Google Android 9",
                  "product_id": "T012696",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:google:android:9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Android"
          }
        ],
        "category": "vendor",
        "name": "Google"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Arch Linux",
            "product": {
              "name": "Open Source Arch Linux",
              "product_id": "T013312",
              "product_identification_helper": {
                "cpe": "cpe:/o:archlinux:archlinux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "BlackBerry BlackBerry",
            "product": {
              "name": "BlackBerry BlackBerry",
              "product_id": "1321",
              "product_identification_helper": {
                "cpe": "cpe:/h:rim:blackberry:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RIM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-6328",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2016-6328"
    },
    {
      "cve": "CVE-2019-9376",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2019-9376"
    },
    {
      "cve": "CVE-2020-0471",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-0471"
    },
    {
      "cve": "CVE-2020-10732",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-10732"
    },
    {
      "cve": "CVE-2020-10766",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-10766"
    },
    {
      "cve": "CVE-2020-11126",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11126"
    },
    {
      "cve": "CVE-2020-11134",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11134"
    },
    {
      "cve": "CVE-2020-11159",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11159"
    },
    {
      "cve": "CVE-2020-11160",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11160"
    },
    {
      "cve": "CVE-2020-11161",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11161"
    },
    {
      "cve": "CVE-2020-11181",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11181"
    },
    {
      "cve": "CVE-2020-11182",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11182"
    },
    {
      "cve": "CVE-2020-11233",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11233"
    },
    {
      "cve": "CVE-2020-11235",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11235"
    },
    {
      "cve": "CVE-2020-11238",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11238"
    },
    {
      "cve": "CVE-2020-11239",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11239"
    },
    {
      "cve": "CVE-2020-11240",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11240"
    },
    {
      "cve": "CVE-2020-11241",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11241"
    },
    {
      "cve": "CVE-2020-11250",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11250"
    },
    {
      "cve": "CVE-2020-11260",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11260"
    },
    {
      "cve": "CVE-2020-11261",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11261"
    },
    {
      "cve": "CVE-2020-11262",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-11262"
    },
    {
      "cve": "CVE-2020-15999",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-15999"
    },
    {
      "cve": "CVE-2020-27059",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2020-27059"
    },
    {
      "cve": "CVE-2021-0301",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0301"
    },
    {
      "cve": "CVE-2021-0303",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0303"
    },
    {
      "cve": "CVE-2021-0304",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0304"
    },
    {
      "cve": "CVE-2021-0306",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0306"
    },
    {
      "cve": "CVE-2021-0307",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0307"
    },
    {
      "cve": "CVE-2021-0308",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0308"
    },
    {
      "cve": "CVE-2021-0309",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0309"
    },
    {
      "cve": "CVE-2021-0310",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0310"
    },
    {
      "cve": "CVE-2021-0311",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0311"
    },
    {
      "cve": "CVE-2021-0312",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0312"
    },
    {
      "cve": "CVE-2021-0313",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0313"
    },
    {
      "cve": "CVE-2021-0315",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0315"
    },
    {
      "cve": "CVE-2021-0316",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0316"
    },
    {
      "cve": "CVE-2021-0317",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0317"
    },
    {
      "cve": "CVE-2021-0318",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0318"
    },
    {
      "cve": "CVE-2021-0319",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0319"
    },
    {
      "cve": "CVE-2021-0320",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0320"
    },
    {
      "cve": "CVE-2021-0321",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0321"
    },
    {
      "cve": "CVE-2021-0322",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0322"
    },
    {
      "cve": "CVE-2021-0323",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0323"
    },
    {
      "cve": "CVE-2021-0342",
      "notes": [
        {
          "category": "description",
          "text": "In Google Android existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Komponenten \"Framework\", \"Media Framework\", \"System\", \"Kernel components\", \"MediaTek components\", \"Qualcomm components\" sowie \"Qualcomm closed-source components\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Programmcode auszuf\u00fchren, einen Denial of Service Zustand herzustellen oder Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "344177",
          "2951",
          "T002207",
          "813964",
          "67646",
          "1321",
          "T012696",
          "T013312",
          "560061",
          "407131"
        ]
      },
      "release_date": "2021-01-04T23:00:00.000+00:00",
      "title": "CVE-2021-0342"
    }
  ]
}

CVE-2016-6328 (GCVE-0-2016-6328)

Vulnerability from cvelistv5 – Published: 2018-10-31 21:00 – Updated: 2024-08-06 01:29

Summary

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).

Severity

6.1 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

CWE

CWE-190

Assigner

redhat

References

5 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://usn.ubuntu.com/4277-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/202007-05	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
[UNKNOWN]	libexif	Affected: n/a

Date Public

2017-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:29:19.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328"
          },
          {
            "name": "USN-4277-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4277-1/"
          },
          {
            "name": "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2020:0793",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html"
          },
          {
            "name": "GLSA-202007-05",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-05"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libexif",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications\u0027 private data)."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-27T00:06:17.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328"
        },
        {
          "name": "USN-4277-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4277-1/"
        },
        {
          "name": "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2020:0793",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html"
        },
        {
          "name": "GLSA-202007-05",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-05"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6328",
    "datePublished": "2018-10-31T21:00:00.000Z",
    "dateReserved": "2016-07-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:29:19.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9376 (GCVE-0-2019-9376)

Vulnerability from cvelistv5 – Published: 2019-09-27 18:05 – Updated: 2024-08-04 21:46

Summary

In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265.

Severity

No CVSS data available.

CWE

Denial of service

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2021-01-01	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Android	Affected: Android-9 Affected: Android-8.0 Affected: Android-8.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T21:46:30.336Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2021-01-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Android-9"
            },
            {
              "status": "affected",
              "version": "Android-8.0"
            },
            {
              "status": "affected",
              "version": "Android-8.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-11T20:33:56.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2021-01-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2019-9376",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android-9"
                          },
                          {
                            "version_value": "Android-8.0"
                          },
                          {
                            "version_value": "Android-8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; Versions: Android-9, Android-8.0, Android-8.1; Android ID: A-129287265."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://source.android.com/security/bulletin/2021-01-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2021-01-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2019-9376",
    "datePublished": "2019-09-27T18:05:17.000Z",
    "dateReserved": "2019-02-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T21:46:30.336Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-0471 (GCVE-0-2020-0471)

Vulnerability from cvelistv5 – Published: 2021-01-11 21:47 – Updated: 2024-08-04 06:02

Summary

In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567.

Severity

No CVSS data available.

CWE

Elevation of privilege

Assigner

google_android

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2021-01-01	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Android	Affected: Android-8.0 Affected: Android-8.1 Affected: Android-9 Affected: Android-10 Affected: Android-11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:02:51.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2021-01-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Android-8.0"
            },
            {
              "status": "affected",
              "version": "Android-8.1"
            },
            {
              "status": "affected",
              "version": "Android-9"
            },
            {
              "status": "affected",
              "version": "Android-10"
            },
            {
              "status": "affected",
              "version": "Android-11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-11T21:47:56.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2021-01-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2020-0471",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android-8.0"
                          },
                          {
                            "version_value": "Android-8.1"
                          },
                          {
                            "version_value": "Android-9"
                          },
                          {
                            "version_value": "Android-10"
                          },
                          {
                            "version_value": "Android-11"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-169327567."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://source.android.com/security/bulletin/2021-01-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2021-01-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2020-0471",
    "datePublished": "2021-01-11T21:47:56.000Z",
    "dateReserved": "2019-10-17T00:00:00.000Z",
    "dateUpdated": "2024-08-04T06:02:51.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-10732 (GCVE-0-2020-10732)

Vulnerability from cvelistv5 – Published: 2020-06-12 00:00 – Updated: 2024-08-04 11:14

Summary

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-908

Assigner

redhat

References

14 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://usn.ubuntu.com/4411-1/	vendor-advisory
https://usn.ubuntu.com/4427-1/	vendor-advisory
https://usn.ubuntu.com/4439-1/	vendor-advisory
https://usn.ubuntu.com/4440-1/	vendor-advisory
https://usn.ubuntu.com/4485-1/	vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…
https://git.kernel.org/pub/scm/linux/kernel/git/n…
https://github.com/ruscur/linux/commit/a95cdec9fa…
https://github.com/google/kmsan/issues/76
https://twitter.com/grsecurity/status/12525580556…
https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuT…
https://security.netapp.com/advisory/ntap-2021012…

Impacted products

1 product

Vendor	Product	Version
Linux kernel	kernel	Affected: introduced in commit 4206d3aa1978e44f58bfa4e1c9d8d35cbf19c187

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:14:14.998Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2020:0801",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html"
          },
          {
            "name": "openSUSE-SU-2020:0935",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html"
          },
          {
            "name": "USN-4411-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4411-1/"
          },
          {
            "name": "USN-4427-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4427-1/"
          },
          {
            "name": "USN-4439-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4439-1/"
          },
          {
            "name": "USN-4440-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4440-1/"
          },
          {
            "name": "USN-4485-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4485-1/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/google/kmsan/issues/76"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://twitter.com/grsecurity/status/1252558055629299712"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210129-0005/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "Linux kernel",
          "versions": [
            {
              "status": "affected",
              "version": "introduced in commit 4206d3aa1978e44f58bfa4e1c9d8d35cbf19c187"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-908",
              "description": "CWE-908",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-07T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "openSUSE-SU-2020:0801",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html"
        },
        {
          "name": "openSUSE-SU-2020:0935",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html"
        },
        {
          "name": "USN-4411-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4411-1/"
        },
        {
          "name": "USN-4427-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4427-1/"
        },
        {
          "name": "USN-4439-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4439-1/"
        },
        {
          "name": "USN-4440-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4440-1/"
        },
        {
          "name": "USN-4485-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4485-1/"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d"
        },
        {
          "url": "https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a"
        },
        {
          "url": "https://github.com/google/kmsan/issues/76"
        },
        {
          "url": "https://twitter.com/grsecurity/status/1252558055629299712"
        },
        {
          "url": "https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20210129-0005/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-10732",
    "datePublished": "2020-06-12T00:00:00.000Z",
    "dateReserved": "2020-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:14:14.998Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-10766 (GCVE-0-2020-10766)

Vulnerability from cvelistv5 – Published: 2020-09-15 22:10 – Updated: 2024-08-04 11:14

Summary

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-440

Assigner

redhat

References

2 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Linux Kernel	kernel	Affected: before 5.8-rc1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:14:15.011Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832e"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "Linux Kernel",
          "versions": [
            {
              "status": "affected",
              "version": "before 5.8-rc1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-440",
              "description": "CWE-440",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-15T22:10:27.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832e"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-10766",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 5.8-rc1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux Kernel"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-440"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832e",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832e"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-10766",
    "datePublished": "2020-09-15T22:10:27.000Z",
    "dateReserved": "2020-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:14:15.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-11126 (GCVE-0-2020-11126)

Vulnerability from cvelistv5 – Published: 2021-06-09 05:00 – Updated: 2024-08-04 11:21

Summary

Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Severity

No CVSS data available.

CWE

Buffer Over Read Issue in WLAN

Assigner

qualcomm

References

1 reference

URL	Tags
https://www.qualcomm.com/company/product-security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking	Affected: APQ8096AU, AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9640, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8996, PM8998, PMC1000H, PMC7180, PMD9645, PMD9655, PME605, PMI632, PMI8996, PMI8998, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMM8996AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6174A, QCA6175A ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:21:14.624Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8096AU, AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9640, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8996, PM8998, PMC1000H, PMC7180, PMD9645, PMD9655, PME605, PMI632, PMI8996, PMI8998, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMM8996AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6174A, QCA6175A ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over Read Issue in WLAN",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-09T05:00:35.000Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2020-11126",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "APQ8096AU, AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9640, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8996, PM8998, PMC1000H, PMC7180, PMD9645, PMD9655, PME605, PMI632, PMI8996, PMI8998, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMM8996AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6174A, QCA6175A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA8072, QCA8075, QCA8081, QCA8337, QCA9377, QCA9379, QCA9888, QCA9889, QCA9898, QCA9980, QCA9984, QCA9990, QCA9992, QCA9994, QCM6125, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN6023, QCN6024, QCN7605, QCN7606, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QCS405, QCS603, QCS605, QCS6125, QDM2301, QDM2302, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM4643, QDM4650, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET4200AQ, QET5100, QET5100M, QET6100, QET6110, QFE1035, QFE1040, QFE1045, QFE2340, QFE2550, QFE3100, QFE3320, QFE3335, QFE3345, QFS2530, QFS2580, QFS2608, QFS2630, QLN1020, QLN1021AQ, QLN1030, QLN1031, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4340, QPA4360, QPA4361, QPA5460, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8688, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM2630, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5541, QPM5577, QPM5579, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6325, QPM6375, QPM6582, QPM6585, QPM6621, QPM6670, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC800S, QTC801S, QTM525, QTM527, RSW8577, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SD 455, SD 636, SD 675, SD 8C, SD 8CX, SD460, SD660, SD662, SD665, SD670, SD675, SD690 5G, SD710, SD712, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD7c, SD820, SD845, SD850, SD855, SD865 5G, SD888 5G, SDM630, SDM830, SDR051, SDR052, SDR425, SDR660, SDR660G, SDR675, SDR735, SDR735G, SDR8150, SDR8250, SDR845, SDR865, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SMB1351, SMB1354, SMB1355, SMB1380, SMB1381, SMB1390, SMB1395, SMB1396, SMB1398, SMB2351, SMR525, SMR526, WCD9326, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WGR7640, WHS9410, WSA8810, WSA8815, WSA8830, WSA8835, WTR2965, WTR3905, WTR3925, WTR4905, WTR5975, WTR6955"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer Over Read Issue in WLAN"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2020-11126",
    "datePublished": "2021-06-09T05:00:35.000Z",
    "dateReserved": "2020-03-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:21:14.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-11134 (GCVE-0-2020-11134)

Vulnerability from cvelistv5 – Published: 2021-06-09 05:00 – Updated: 2024-08-04 11:21

Summary

Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Severity

No CVSS data available.

CWE

Improper Validation of Array Index in WLAN

Assigner

qualcomm

References

1 reference

URL	Tags
https://www.qualcomm.com/company/product-security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking	Affected: AQT1000, AR8031, AR8035, CSR8811, CSRA6620, CSRA6640, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PMC1000H, PMC7180, PMD9655, PMI632, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6175A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA8072, QCA8075 ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:21:14.790Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "AQT1000, AR8031, AR8035, CSR8811, CSRA6620, CSRA6640, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PMC1000H, PMC7180, PMD9655, PMI632, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6175A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA8072, QCA8075 ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Validation of Array Index in WLAN",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-09T05:00:36.000Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2020-11134",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "AQT1000, AR8031, AR8035, CSR8811, CSRA6620, CSRA6640, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PMC1000H, PMC7180, PMD9655, PMI632, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6175A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA8072, QCA8075, QCA8081, QCA8337, QCA9888, QCA9889, QCA9984, QCM6125, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN6023, QCN6024, QCN7605, QCN7606, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QCS405, QCS410, QCS610, QCS6125, QDM2301, QDM2302, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM4643, QDM4650, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET4200AQ, QET5100, QET5100M, QET6100, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN1021AQ, QLN1031, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4360, QPA4361, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8688, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5541, QPM5577, QPM5579, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6325, QPM6375, QPM6582, QPM6585, QPM6621, QPM6670, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, QTM527, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SD 675, SD 8C, SD 8CX, SD460, SD662, SD665, SD675, SD690 5G, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD7c, SD855, SD865 5G, SD888 5G, SDR051, SDR052, SDR425, SDR660, SDR660G, SDR675, SDR735, SDR735G, SDR8150, SDR8250, SDR865, SDX50M, SDX55, SDX55M, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SMB1351, SMB1354, SMB1355, SMB1381, SMB1390, SMB1395, SMB1396, SMB1398, SMB2351, SMR525, SMR526, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WGR7640, WHS9410, WSA8810, WSA8815, WSA8830, WSA8835, WTR2965, WTR3925"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Improper Validation of Array Index in WLAN"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2020-11134",
    "datePublished": "2021-06-09T05:00:36.000Z",
    "dateReserved": "2020-03-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:21:14.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-11159 (GCVE-0-2020-11159)

Vulnerability from cvelistv5 – Published: 2021-06-09 05:00 – Updated: 2024-08-04 11:28

Summary

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Severity

No CVSS data available.

CWE

Buffer Over-read Issue in WLAN

Assigner

qualcomm

References

1 reference

URL	Tags
https://www.qualcomm.com/company/product-security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking	Affected: APQ8009, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8084, APQ8092, APQ8094, APQ8096AU, AQT1000, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM8215, MDM9206, MDM9215, MDM9225, MDM9225M, MDM9230, MDM9235M, MDM9250, MDM9310, MDM9330, MDM9607, MDM9615, MDM9625, MDM9625M, MDM9626, MDM9628, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8976, MSM8992, MSM8994, MSM8996AU, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:28:12.378Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8009, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8084, APQ8092, APQ8094, APQ8096AU, AQT1000, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM8215, MDM9206, MDM9215, MDM9225, MDM9225M, MDM9230, MDM9235M, MDM9250, MDM9310, MDM9330, MDM9607, MDM9615, MDM9625, MDM9625M, MDM9626, MDM9628, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8976, MSM8992, MSM8994, MSM8996AU, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over-read Issue in WLAN",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-09T05:00:36.000Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2020-11159",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "APQ8009, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8084, APQ8092, APQ8094, APQ8096AU, AQT1000, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM8215, MDM9206, MDM9215, MDM9225, MDM9225M, MDM9230, MDM9235M, MDM9250, MDM9310, MDM9330, MDM9607, MDM9615, MDM9625, MDM9625M, MDM9626, MDM9628, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8976, MSM8992, MSM8994, MSM8996AU, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8909, PM8916, PM8937, PM8952, PM8953, PM8956, PM8994, PM8996, PM8998, PMC1000H, PMC7180, PMD9607, PMD9635, PMD9645, PMD9655, PME605, PMI632, PMI8952, PMI8994, PMI8996, PMI8998, PMK8001, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM855AU, PMM8920AU, PMM8996AU, PMP8074, PMR525, PMR735A, PMR735B, PMX20, PMX24, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1000, QBT1500, QBT2000, QCA0000, QCA1990, QCA4020, QCA4024, QCA4531, QCA6164, QCA6174, QCA6174A, QCA6175A, QCA6234, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA8072, QCA8075, QCA8081, QCA8337, QCA9367, QCA9369, QCA9377, QCA9378, QCA9378A, QCA9379, QCA9886, QCA9888, QCA9889, QCA9898, QCA9980, QCA9984, QCA9990, QCA9992, QCA9994, QCM6125, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN6023, QCN6024, QCN7605, QCN7606, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QCS405, QCS410, QCS603, QCS605, QCS610, QCS6125, QDM2301, QDM2302, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM4643, QDM4650, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET4200AQ, QET5100, QET5100M, QET6100, QET6110, QFE1035, QFE1040, QFE1045, QFE1055, QFE1100, QFE2080FC, QFE2081FC, QFE2082FC, QFE2101, QFE2330, QFE2340, QFE2520, QFE2550, QFE3100, QFE3320, QFE3335, QFE3340, QFE3345, QFE3440FC, QFE4455FC, QFE4465FC, QFS2530, QFS2580, QFS2608, QFS2630, QLN1020, QLN1021AQ, QLN1030, QLN1031, QLN1035BD, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4340, QPA4360, QPA4361, QPA5460, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8688, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM2630, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5541, QPM5577, QPM5579, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6325, QPM6375, QPM6582, QPM6585, QPM6621, QPM6670, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC800S, QTC800T, QTC801S, QTM525, QTM527, RGR7640AU, RSW8577, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SD 455, SD 636, SD 675, SD 8C, SD 8CX, SD210, SD460, SD660, SD662, SD665, SD670, SD675, SD690 5G, SD710, SD712, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD7c, SD820, SD821, SD835, SD845, SD850, SD855, SD865 5G, SD888 5G, SDM630, SDM830, SDR051, SDR052, SDR425, SDR660, SDR660G, SDR675, SDR735, SDR735G, SDR8150, SDR8250, SDR845, SDR865, SDX20, SDX20M, SDX24, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SMB1350, SMB1351, SMB1354, SMB1355, SMB1357, SMB1358, SMB1360, SMB1380, SMB1381, SMB1390, SMB1395, SMB1396, SMB1398, SMB231, SMB2351, SMB358S, SMR525, SMR526, WCD9326, WCD9330, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WGR7640, WHS9410, WSA8810, WSA8815, WSA8830, WSA8835, WTR1605, WTR1625L, WTR2955, WTR2965, WTR3905, WTR3925, WTR3925L, WTR3950, WTR4605, WTR4905, WTR5975, WTR6955"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer Over-read Issue in WLAN"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2020-11159",
    "datePublished": "2021-06-09T05:00:36.000Z",
    "dateReserved": "2020-03-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:28:12.378Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-11160 (GCVE-0-2020-11160)

Vulnerability from cvelistv5 – Published: 2021-06-09 05:00 – Updated: 2024-08-04 11:28

Summary

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Severity

No CVSS data available.

CWE

Integer Overflow or Wraparound issues in Diag Services

Assigner

qualcomm

References

1 reference

URL	Tags
https://www.qualcomm.com/company/product-security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Affected: APQ8096AU, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, MDM9650, PM215, PM3003A, PM6125, PM6150, PM6150L, PM640A, PM640L, PM640P, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855B, PM855L, PM855P, PM8916, PMC1000H, PMD9655, PMI632, PMK8002, PMM6155AU, PMM8155AU, PMM855AU, PMM8996AU, PMR525, PMX55, QAT3519, QAT3522, QAT3550, QAT3555, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9379, QCS405, QCS410, QCS610, QDM2301, QDM2302, QET4100, QET4101, QFS2530, QFS2580, QLN1030, QPA4360, QPA4361, QPA6560, QPA8673, QPM5541, QPM5577, QPM5579, QPM6325, QPM6375, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, QTM527, Qualcomm215, SA6145P, SA6155P, SA8155, SA8155P, SD 8C, SD 8CX, SD460, SD662, SD665, SD675, SD855, SD865 5G, SDA429W, SDM429W, SDR425, SDR660, SDR8150, SDR8250, SDR865, SDX55, SDX55M, SMB1351, SMB1354, SMB1355, SMB1381, SM ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:28:12.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8096AU, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, MDM9650, PM215, PM3003A, PM6125, PM6150, PM6150L, PM640A, PM640L, PM640P, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855B, PM855L, PM855P, PM8916, PMC1000H, PMD9655, PMI632, PMK8002, PMM6155AU, PMM8155AU, PMM855AU, PMM8996AU, PMR525, PMX55, QAT3519, QAT3522, QAT3550, QAT3555, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9379, QCS405, QCS410, QCS610, QDM2301, QDM2302, QET4100, QET4101, QFS2530, QFS2580, QLN1030, QPA4360, QPA4361, QPA6560, QPA8673, QPM5541, QPM5577, QPM5579, QPM6325, QPM6375, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, QTM527, Qualcomm215, SA6145P, SA6155P, SA8155, SA8155P, SD 8C, SD 8CX, SD460, SD662, SD665, SD675, SD855, SD865 5G, SDA429W, SDM429W, SDR425, SDR660, SDR8150, SDR8250, SDR865, SDX55, SDX55M, SMB1351, SMB1354, SMB1355, SMB1381, SM ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Integer Overflow or Wraparound issues in Diag Services",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-09T05:00:37.000Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2020-11160",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "APQ8096AU, AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, MDM9650, PM215, PM3003A, PM6125, PM6150, PM6150L, PM640A, PM640L, PM640P, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855B, PM855L, PM855P, PM8916, PMC1000H, PMD9655, PMI632, PMK8002, PMM6155AU, PMM8155AU, PMM855AU, PMM8996AU, PMR525, PMX55, QAT3519, QAT3522, QAT3550, QAT3555, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9379, QCS405, QCS410, QCS610, QDM2301, QDM2302, QET4100, QET4101, QFS2530, QFS2580, QLN1030, QPA4360, QPA4361, QPA6560, QPA8673, QPM5541, QPM5577, QPM5579, QPM6325, QPM6375, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, QTM527, Qualcomm215, SA6145P, SA6155P, SA8155, SA8155P, SD 8C, SD 8CX, SD460, SD662, SD665, SD675, SD855, SD865 5G, SDA429W, SDM429W, SDR425, SDR660, SDR8150, SDR8250, SDR865, SDX55, SDX55M, SMB1351, SMB1354, SMB1355, SMB1381, SMB1390, SMB2351, SMR525, SMR526, WCD9326, WCD9335, WCD9340, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3680B, WCN3950, WCN3980, WCN3988, WCN3998, WCN3999, WCN6850, WCN6851, WGR7640, WSA8810, WSA8815, WTR2965, WTR3925, WTR5975"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Integer Overflow or Wraparound issues in Diag Services"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2020-11160",
    "datePublished": "2021-06-09T05:00:37.000Z",
    "dateReserved": "2020-03-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:28:12.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-11161 (GCVE-0-2020-11161)

Vulnerability from cvelistv5 – Published: 2021-06-09 05:00 – Updated: 2024-08-04 11:28

Summary

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Severity

No CVSS data available.

CWE

Buffer Over-read Issue in Graphics

Assigner

qualcomm

References

1 reference

URL	Tags
https://www.qualcomm.com/company/product-security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music	Affected: APQ8053, APQ8064AU, APQ8096AU, AR8031, AR8151, CSRA6620, CSRA6640, MDM9650, MSM8996AU, PM215, PM3003A, PM6125, PM6150, PM6150L, PM670, PM670A, PM670L, PM7350C, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM8909, PM8953, PM8998, PMD9607, PMD9655, PME605, PMI632, PMI8952, PMK7350, PMK8002, PMK8350, PMM6155AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMX20, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3555, QAT5515, QAT5516, QAT5522, QAT5568, QBT2000, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA9367, QCA9377, QCA9379, QCS405, QCS410, QCS603, QCS605, QCS610, QDM2301, QDM2302, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET5100M, QET6100, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN1030, QLN4642, QLN4650, QLN5020, QLN5030, QL ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:28:12.926Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "APQ8053, APQ8064AU, APQ8096AU, AR8031, AR8151, CSRA6620, CSRA6640, MDM9650, MSM8996AU, PM215, PM3003A, PM6125, PM6150, PM6150L, PM670, PM670A, PM670L, PM7350C, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM8909, PM8953, PM8998, PMD9607, PMD9655, PME605, PMI632, PMI8952, PMK7350, PMK8002, PMK8350, PMM6155AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMX20, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3555, QAT5515, QAT5516, QAT5522, QAT5568, QBT2000, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA9367, QCA9377, QCA9379, QCS405, QCS410, QCS603, QCS605, QCS610, QDM2301, QDM2302, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET5100M, QET6100, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN1030, QLN4642, QLN4650, QLN5020, QLN5030, QL ...[truncated*]"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over-read Issue in Graphics",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-09T05:00:38.000Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
        }
      ],
      "x_ConverterErrors": {
        "version_name": {
          "error": "version_name too long. Use array of versions to record more than one version.",
          "message": "Truncated!"
        }
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@qualcomm.com",
          "ID": "CVE-2020-11161",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "APQ8053, APQ8064AU, APQ8096AU, AR8031, AR8151, CSRA6620, CSRA6640, MDM9650, MSM8996AU, PM215, PM3003A, PM6125, PM6150, PM6150L, PM670, PM670A, PM670L, PM7350C, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM8909, PM8953, PM8998, PMD9607, PMD9655, PME605, PMI632, PMI8952, PMK7350, PMK8002, PMK8350, PMM6155AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMX20, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3555, QAT5515, QAT5516, QAT5522, QAT5568, QBT2000, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA9367, QCA9377, QCA9379, QCS405, QCS410, QCS603, QCS605, QCS610, QDM2301, QDM2302, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET5100M, QET6100, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN1030, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4360, QPA4361, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5621, QPM5641, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6585, QPM6621, QPM6670, QPM8820, QPM8870, QSM8250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC801S, QTM525, Qualcomm215, RGR7640AU, SA6145P, SA6155P, SD205, SD210, SD460, SD662, SD665, SD835, SD855, SD865 5G, SD888 5G, SDR425, SDR660, SDR735, SDR735G, SDR8250, SDR865, SDX20, SDX20M, SDX55, SDX55M, SDXR2 5G, SM7350, SMB1350, SMB1351, SMB1354, SMB1355, SMB1357, SMB1358, SMB1381, SMB1390, SMB1394, SMB1395, SMB1396, SMB1398, SMB231, SMR525, SMR526, WCD9326, WCD9330, WCD9335, WCD9340, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3660B, WCN3680, WCN3680B, WCN3950, WCN3980, WCN3988, WCN3990, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6856, WGR7640, WSA8810, WSA8815, WSA8830, WSA8835, WTR2965, WTR3925, WTR4905, WTR5975"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Qualcomm, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer Over-read Issue in Graphics"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin",
              "refsource": "CONFIRM",
              "url": "https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2020-11161",
    "datePublished": "2021-06-09T05:00:38.000Z",
    "dateReserved": "2020-03-31T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:28:12.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2022-1994

CVE-2016-6328 (GCVE-0-2016-6328)

CVE-2019-9376 (GCVE-0-2019-9376)

CVE-2020-0471 (GCVE-0-2020-0471)

CVE-2020-10732 (GCVE-0-2020-10732)

CVE-2020-10766 (GCVE-0-2020-10766)

CVE-2020-11126 (GCVE-0-2020-11126)

CVE-2020-11134 (GCVE-0-2020-11134)

CVE-2020-11159 (GCVE-0-2020-11159)

CVE-2020-11160 (GCVE-0-2020-11160)

CVE-2020-11161 (GCVE-0-2020-11161)

Tags

Sightings

Nomenclature