CVE-2020-11207 HIGH

Published: 2020-11-12 | Last Modified: 2024-11-21 | Status: Modified

Description

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

Additional Descriptions (1)

Un desbordamiento del búfer en la biblioteca LibFastCV debido a comprobaciones de tamaño inapropiadas con respecto a la longitud del búfer en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile en versiones APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector	LOCAL
Attack Complexity	LOW
Privileges Required	LOW
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Base Score: 7.2 (HIGH)

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector	LOCAL
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 10.0

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-120

Affected Products

Vendor	Product	Version	Update	Type
qualcomm	apq8052_firmware	-	<built-in method update of dict object at 0x7c3c32718ec0>	Operating System
qualcomm	apq8056_firmware	-	<built-in method update of dict object at 0x7c3c481f6bc0>	Operating System
qualcomm	apq8076_firmware	-	<built-in method update of dict object at 0x7c3c288317c0>	Operating System
qualcomm	apq8096_firmware	-	<built-in method update of dict object at 0x7c3cbc42fd00>	Operating System
qualcomm	apq8098_firmware	-	<built-in method update of dict object at 0x7c3bf3e0e300>	Operating System
qualcomm	mdm9655_firmware	-	<built-in method update of dict object at 0x7c3bf3e0df80>	Operating System
qualcomm	msm8952_firmware	-	<built-in method update of dict object at 0x7c3c28833f80>	Operating System
qualcomm	msm8956_firmware	-	<built-in method update of dict object at 0x7c3c327fef80>	Operating System
qualcomm	msm8976_firmware	-	<built-in method update of dict object at 0x7c3c327fe6c0>	Operating System
qualcomm	msm8976sg_firmware	-	<built-in method update of dict object at 0x7c3bf3e0eb80>	Operating System
qualcomm	msm8996_firmware	-	<built-in method update of dict object at 0x7c3c327fffc0>	Operating System
qualcomm	msm8996sg_firmware	-	<built-in method update of dict object at 0x7c3c48325dc0>	Operating System
qualcomm	msm8998_firmware	-	<built-in method update of dict object at 0x7c3c29ed7580>	Operating System
qualcomm	qcm4290_firmware	-	<built-in method update of dict object at 0x7c3c327ff100>	Operating System
qualcomm	qcm6125_firmware	-	<built-in method update of dict object at 0x7c3c28832600>	Operating System
qualcomm	qcs410_firmware	-	<built-in method update of dict object at 0x7c3c327fd980>	Operating System
qualcomm	qcs4290_firmware	-	<built-in method update of dict object at 0x7c3bf3e0cdc0>	Operating System
qualcomm	qcs610_firmware	-	<built-in method update of dict object at 0x7c3c327ffc80>	Operating System
qualcomm	qcs6125_firmware	-	<built-in method update of dict object at 0x7c3c327fdf40>	Operating System
qualcomm	qsm8250_firmware	-	<built-in method update of dict object at 0x7c3c476bcbc0>	Operating System
qualcomm	sa6145p_firmware	-	<built-in method update of dict object at 0x7c3c327ff700>	Operating System
qualcomm	sa6150p_firmware	-	<built-in method update of dict object at 0x7c3c48324640>	Operating System
qualcomm	sa6155_firmware	-	<built-in method update of dict object at 0x7c3c327fc9c0>	Operating System
qualcomm	sa6155p_firmware	-	<built-in method update of dict object at 0x7c3c47780580>	Operating System
qualcomm	sa8150p_firmware	-	<built-in method update of dict object at 0x7c3c327fd000>	Operating System
qualcomm	sa8155_firmware	-	<built-in method update of dict object at 0x7c3c28833980>	Operating System
qualcomm	sa8155p_firmware	-	<built-in method update of dict object at 0x7c3bf3b7ba40>	Operating System
qualcomm	sa8195p_firmware	-	<built-in method update of dict object at 0x7c3c327fc940>	Operating System
qualcomm	sc7180_firmware	-	<built-in method update of dict object at 0x7c3c327fca80>	Operating System
qualcomm	sda640_firmware	-	<built-in method update of dict object at 0x7c3cbc42fbc0>	Operating System
qualcomm	sda660_firmware	-	<built-in method update of dict object at 0x7c3c483457c0>	Operating System
qualcomm	sda845_firmware	-	<built-in method update of dict object at 0x7c3c327fe500>	Operating System
qualcomm	sda855_firmware	-	<built-in method update of dict object at 0x7c3bf3b78100>	Operating System
qualcomm	sdm640_firmware	-	<built-in method update of dict object at 0x7c3c327ff3c0>	Operating System
qualcomm	sdm660_firmware	-	<built-in method update of dict object at 0x7c3c327fe600>	Operating System
qualcomm	sdm830_firmware	-	<built-in method update of dict object at 0x7c3c476bc300>	Operating System
qualcomm	sdm845_firmware	-	<built-in method update of dict object at 0x7c3c28832d40>	Operating System
qualcomm	sdm850_firmware	-	<built-in method update of dict object at 0x7c3c327fee40>	Operating System
qualcomm	sdx50m_firmware	-	<built-in method update of dict object at 0x7c3bf3bb66c0>	Operating System
qualcomm	sdx55_firmware	-	<built-in method update of dict object at 0x7c3c47665680>	Operating System
qualcomm	sdx55m_firmware	-	<built-in method update of dict object at 0x7c3bf1837380>	Operating System
qualcomm	sm4250_firmware	-	<built-in method update of dict object at 0x7c3c47667640>	Operating System
qualcomm	sm4250p_firmware	-	<built-in method update of dict object at 0x7c3c47664e80>	Operating System
qualcomm	sm6115_firmware	-	<built-in method update of dict object at 0x7c3c47666840>	Operating System
qualcomm	sm6115p_firmware	-	<built-in method update of dict object at 0x7c3c477e5500>	Operating System
qualcomm	sm6125_firmware	-	<built-in method update of dict object at 0x7c3c32746000>	Operating System
qualcomm	sm6150_firmware	-	<built-in method update of dict object at 0x7c3bf1836fc0>	Operating System
qualcomm	sm6150p_firmware	-	<built-in method update of dict object at 0x7c3c685a47c0>	Operating System
qualcomm	sm6250_firmware	-	<built-in method update of dict object at 0x7c3c468955c0>	Operating System
qualcomm	sm6250p_firmware	-	<built-in method update of dict object at 0x7c3c46896140>	Operating System
qualcomm	sm6350_firmware	-	<built-in method update of dict object at 0x7c3c477e4300>	Operating System
qualcomm	sm7125_firmware	-	<built-in method update of dict object at 0x7c3c4777d0c0>	Operating System
qualcomm	sm7150_firmware	-	<built-in method update of dict object at 0x7c3c46897800>	Operating System
qualcomm	sm7150p_firmware	-	<built-in method update of dict object at 0x7c3bf3b4f200>	Operating System
qualcomm	sm7225_firmware	-	<built-in method update of dict object at 0x7c3c468954c0>	Operating System
qualcomm	sm7250_firmware	-	<built-in method update of dict object at 0x7c3c477e7b40>	Operating System
qualcomm	sm7250p_firmware	-	<built-in method update of dict object at 0x7c3bf3b4ed40>	Operating System
qualcomm	sm8150_firmware	-	<built-in method update of dict object at 0x7c3c2b035a40>	Operating System
qualcomm	sm8150p_firmware	-	<built-in method update of dict object at 0x7c3c468974c0>	Operating System
qualcomm	sm8250_firmware	-	<built-in method update of dict object at 0x7c3c46896000>	Operating System
qualcomm	sxr2130_firmware	-	<built-in method update of dict object at 0x7c3bf2545340>	Operating System
qualcomm	sxr2130p_firmware	-	<built-in method update of dict object at 0x7c3c327451c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:apq8052_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:apq8052:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:apq8056_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:apq8056:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:apq8076_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:apq8076:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:apq8096_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:apq8096:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:apq8098_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:apq8098:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:mdm9655_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:mdm9655:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8952_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8952:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8956_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8956:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8976_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8976:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8976sg_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8976sg:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8996_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8996:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8996sg_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8996sg:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:msm8998_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:msm8998:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcm4290_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcm4290:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcm6125_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcm6125:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcs410_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcs410:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcs4290_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcs4290:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcs610_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcs610:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qcs6125_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qcs6125:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:qsm8250_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:qsm8250:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa6145p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa6145p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa6150p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa6150p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa6155_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa6155:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa6155p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa8150p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa8150p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa8155_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa8155:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa8155p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa8155p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sa8195p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sa8195p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sc7180_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sc7180:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sda640_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sda640:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sda660_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sda660:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sda845_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sda845:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sda855_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sda855:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdm640_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdm640:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdm660_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdm660:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdm830_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdm830:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdm845_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdm845:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdm850_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdm850:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdx50m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdx50m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdx55:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sdx55m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sdx55m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm4250_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm4250:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm4250p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm4250p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6115_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6115:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6115p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6115p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6125_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6125:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6150_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6150p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6150p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6250_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6250:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6250p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6250p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm6350_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm6350:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7125_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7125:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7150_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7150p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7150p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7225_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7225:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7250_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7250:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm7250p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm7250p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm8150_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm8150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm8150p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm8150p:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sm8250_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sm8250:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sxr2130_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sxr2130:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:qualcomm:sxr2130p_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:qualcomm:sxr2130p:-:::::::*`

References

https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
Source: [email protected]

Third Party Advisory
https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
Source: [email protected]

Exploit Third Party Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Source: [email protected]

Vendor Advisory
https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory