Skip to main content

Bitra Firmware CVE-2020-11129

HIGH
Use After Free (CWE-416)
2020-09-09 product-security@qualcomm.com
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 09, 2020 - 07:15 nvd
HIGH 7.8

DescriptionNVD

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130

AnalysisAI

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130 Affected products include: Qualcomm Bitra Firmware, Qualcomm Kamorta Firmware, Qualcomm Qcs605 Firmware, Qualcomm Saipan Firmware, Qualcomm Sdm710 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.

CVE-2020-3703 CRITICAL
9.8 Nov 02

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode r

CVE-2020-3673 CRITICAL
9.8 Nov 02

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check

CVE-2020-3654 CRITICAL
9.8 Nov 02

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying int

CVE-2020-11116 CRITICAL
9.8 Sep 08

u'Possible out of bound write while processing association response received from host due to lack of check of IE length

CVE-2020-3694 HIGH
7.8 Nov 02

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapd

CVE-2020-3693 HIGH
7.8 Nov 02

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snap

CVE-2020-3690 HIGH
7.8 Nov 02

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdrag

CVE-2020-3684 HIGH
7.8 Nov 02

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader

CVE-2020-3638 HIGH
7.8 Nov 02

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper a

CVE-2020-11174 HIGH
7.8 Nov 02

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdra

CVE-2020-11164 HIGH
7.8 Nov 02

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access c

CVE-2020-11162 HIGH
7.8 Nov 02

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI devic

Share

CVE-2020-11129 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy