CVEvulnerability

CVE-2020-11131

7.8 HIGH Published 2020-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-190

Description

u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9250, MDM9628, MDM9640, MDM9650, MSM8996AU, QCS405, SDA845, SDX20, SDX20M, WCD9330

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8053 firmware • qualcomm apq8096au firmware • qualcomm mdm9206 firmware • qualcomm mdm9250 firmware • qualcomm mdm9628 firmware • qualcomm mdm9640 firmware • qualcomm mdm9650 firmware • qualcomm msm8996au firmware • qualcomm qcs405 firmware • qualcomm sda845 firmware • qualcomm sdx20 firmware • qualcomm sdx20m firmware • qualcomm wcd9330 firmware

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References