Vulnerability

CVE-2020-11195

Component: TRUST
Location: OS
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Impact

Severity (Manufact.)

HIGH

Severity (NIST)

7.8

Severity (Android)

N/A

Chipsets

9

Devices

475

Affected Hardware

NameAlso known asManufacturer
MSM8208
Snapdragon 208
Qualcomm
MSM8916
Snapdragon 410
Qualcomm
SM4350
Snapdragon 480
Qualcomm
SM6150
Snapdragon 675
Qualcomm
SM8350
Snapdragon 888
Qualcomm
SC8180
Snapdragon 8c
Qualcomm
SC8180X
Snapdragon 8cx
Qualcomm
MSM8996AU
Snapdragon 820A
Qualcomm
APQ8016
Snapdragon 410
Qualcomm
9 of 9 row(s) shown.

Rows per page

Page 1 of 1

Timeline

Introduced (est):
Jan 1, 2014
Reported:
Apr 30, 2020
Advisory Published:
Feb 1, 2021
CVE Published:
Feb 22, 2021
Android Patch Level:
Mar 2021
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter