by Kastro
Paper/Archive/CVE-2020-11172

CVE-2020-11172

Qualcomm, Inc. Snapdragon Wired Infrastructure and Networking — u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snap…

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.9.549 × 2011.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980

Affected

ProductAffectedFixed inSource
Snapdragon Wired Infrastructure and NetworkingIPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refqualcomm.com/company/product-security/bulletins/october-2020-bulletin