CVEvulnerability

CVE-2020-11216

9.8 CRITICAL Published 2021-01-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-125, CWE-190

Description

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

• qualcomm apq8009 • qualcomm apq8009w • qualcomm apq8017 • qualcomm apq8037 • qualcomm apq8053 • qualcomm apq8064au • qualcomm apq8096au • qualcomm aqt1000 • qualcomm ar8031 • qualcomm ar8151 • qualcomm csra6620 • qualcomm csra6640 • qualcomm fsm10055 • qualcomm fsm10056 • qualcomm mdm9206 • qualcomm mdm9650 • qualcomm msm8909w • qualcomm msm8917 • qualcomm msm8920 • qualcomm msm8937 • qualcomm msm8940 • qualcomm msm8953 • qualcomm msm8996au • qualcomm pm215 • qualcomm pm3003a • qualcomm pm439 • qualcomm pm456 • qualcomm pm6125 • qualcomm pm6150 • qualcomm pm6150a • qualcomm pm6150l • qualcomm pm6250 • qualcomm pm6350 • qualcomm pm640a • qualcomm pm640l • qualcomm pm640p • qualcomm pm660 • qualcomm pm660a • qualcomm pm660l • qualcomm pm670 • qualcomm pm670a • qualcomm pm670l • qualcomm pm7150a • qualcomm pm7150l • qualcomm pm7250 • qualcomm pm7250b • qualcomm pm7350c • qualcomm pm8004 • qualcomm pm8005 • qualcomm pm8008 • qualcomm pm8009 • qualcomm pm8150a • qualcomm pm8150b • qualcomm pm8150c • qualcomm pm8150l • qualcomm pm8250 • qualcomm pm8350 • qualcomm pm8350b • qualcomm pm8350bh • qualcomm pm8350bhs … and 309 more

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-190 Integer Overflow or Wraparound weakness

References