What’s Vulnerable › Vulnerabilities

CVE-2020-11139

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-787

Description

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

• Qualcomm Apq8017: all versions
• Qualcomm Apq8037: all versions
• Qualcomm Apq8052: all versions
• Qualcomm Apq8053: all versions
• Qualcomm Apq8056: all versions
• Qualcomm Apq8064Au: all versions
• Qualcomm Apq8076: all versions
• Qualcomm Apq8096Au: all versions
• Qualcomm Aqt1000: all versions
• Qualcomm Ar8031: all versions
• Qualcomm Ar8035: all versions
• Qualcomm Csra6620: all versions
• Qualcomm Csra6640: all versions
• Qualcomm Mdm9640: all versions
• Qualcomm Mdm9650: all versions
• Qualcomm Msm8917: all versions
• Qualcomm Msm8920: all versions
• Qualcomm Msm8937: all versions
• Qualcomm Msm8940: all versions
• Qualcomm Msm8952: all versions
• Qualcomm Msm8953: all versions
• Qualcomm Msm8956: all versions
• Qualcomm Msm8976: all versions
• Qualcomm Msm8976Sg: all versions
• Qualcomm Msm8996Au: all versions
• Qualcomm Pm215: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm4125: all versions
• Qualcomm Pm439: all versions
• Qualcomm Pm456: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11139 or the next vulnerability affects your stack