CVEvulnerability

CVE-2020-11261

7.8 HIGH Known exploited Published 2021-06-09 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability — Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Added to KEV
2021-12-01
Remediation due
2022-06-01
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-11261
Status
Analyzed
Published
2021-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20, CWE-787

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8009w firmware • qualcomm apq8017 firmware • qualcomm apq8037 firmware • qualcomm apq8053 firmware • qualcomm apq8064au firmware • qualcomm apq8096au firmware • qualcomm aqt1000 firmware • qualcomm ar8031 firmware • qualcomm ar8035 firmware • qualcomm ar8151 firmware • qualcomm csra6620 firmware • qualcomm csra6640 firmware • qualcomm csrb31024 firmware • qualcomm fsm10055 firmware • qualcomm fsm10056 firmware • qualcomm mdm9650 firmware • qualcomm msm8909w firmware • qualcomm msm8917 firmware • qualcomm msm8920 firmware • qualcomm msm8937 firmware • qualcomm msm8940 firmware • qualcomm msm8953 firmware • qualcomm msm8996au firmware • qualcomm pm215 firmware • qualcomm pm3003a firmware • qualcomm pm4125 firmware • qualcomm pm439 firmware • qualcomm pm456 firmware • qualcomm pm6125 firmware • qualcomm pm6150 firmware • qualcomm pm6150a firmware • qualcomm pm6150l firmware • qualcomm pm6250 firmware • qualcomm pm6350 firmware • qualcomm pm640a firmware • qualcomm pm640l firmware • qualcomm pm640p firmware • qualcomm pm660 firmware • qualcomm pm660a firmware • qualcomm pm660l firmware • qualcomm pm670 firmware • qualcomm pm670a firmware • qualcomm pm670l firmware • qualcomm pm7150a firmware • qualcomm pm7150l firmware • qualcomm pm7250 firmware • qualcomm pm7250b firmware • qualcomm pm7350c firmware • qualcomm pm8004 firmware • qualcomm pm8005 firmware • qualcomm pm8008 firmware • qualcomm pm8009 firmware • qualcomm pm8150 firmware • qualcomm pm8150a firmware • qualcomm pm8150b firmware • qualcomm pm8150c firmware • qualcomm pm8150l firmware • qualcomm pm8250 firmware • qualcomm pm8350 firmware … and 339 more

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-787 Out-of-bounds Write weakness

References