Skip to main content

Qualcomm Mobile Access Point

1 CVEs product

Monthly

CVE-2020-25858 Oct 15, 16:15 HIGH POC This Week

The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer(). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm Qualcomm Mobile Access Point
NVD
CVSS 3.1
7.5
EPSS
9.6%
EPSS 10% CVSS 7.5
HIGH POC This Week

The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer(). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy