What’s Vulnerable › Vulnerabilities
CVE-2020-11127
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-11-12 · updated 2026-06-17
- Weakness: CWE-190
Description
u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCM4290, QCS405, QCS410, QCS4290, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA845, SDA855, SDM1000, SDM640, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
Affected products
- Qualcomm Mdm9205 Firmware: all versions
- Qualcomm Qcm4290 Firmware: all versions
- Qualcomm Qcs405 Firmware: all versions
- Qualcomm Qcs410 Firmware: all versions
- Qualcomm Qcs4290 Firmware: all versions
- Qualcomm Qcs610 Firmware: all versions
- Qualcomm Qsm8250 Firmware: all versions
- Qualcomm Sa415M Firmware: all versions
- Qualcomm Sa515M Firmware: all versions
- Qualcomm Sa6145P Firmware: all versions
- Qualcomm Sa6150P Firmware: all versions
- Qualcomm Sa6155 Firmware: all versions
- Qualcomm Sa6155P Firmware: all versions
- Qualcomm Sa8150P Firmware: all versions
- Qualcomm Sa8155 Firmware: all versions
- Qualcomm Sa8155P Firmware: all versions
- Qualcomm Sa8195P Firmware: all versions
- Qualcomm Sc7180 Firmware: all versions
- Qualcomm Sc8180X Firmware: all versions
- Qualcomm Sc8180Xp Firmware: all versions
- Qualcomm Sda640 Firmware: all versions
- Qualcomm Sda845 Firmware: all versions
- Qualcomm Sda855 Firmware: all versions
- Qualcomm Sdm1000 Firmware: all versions
- Qualcomm Sdm640 Firmware: all versions
- Qualcomm Sdm830 Firmware: all versions
- Qualcomm Sdm845 Firmware: all versions
- Qualcomm Sdm850 Firmware: all versions
- Qualcomm Sdx24 Firmware: all versions
- Qualcomm Sdx50M Firmware: all versions
References
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Get alerted when CVE-2020-11127 or the next vulnerability affects your stack