What’s Vulnerable › Vulnerabilities

CVE-2020-11150

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-119

Description

Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm Aqt1000: all versions
• Qualcomm Ar8031: all versions
• Qualcomm Ar8035: all versions
• Qualcomm Csra6620: all versions
• Qualcomm Csra6640: all versions
• Qualcomm Pm215: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm6125: all versions
• Qualcomm Pm6150: all versions
• Qualcomm Pm6150A: all versions
• Qualcomm Pm6150L: all versions
• Qualcomm Pm6350: all versions
• Qualcomm Pm640A: all versions
• Qualcomm Pm640L: all versions
• Qualcomm Pm640P: all versions
• Qualcomm Pm660: all versions
• Qualcomm Pm660L: all versions
• Qualcomm Pm670: all versions
• Qualcomm Pm670A: all versions
• Qualcomm Pm670L: all versions
• Qualcomm Pm7150A: all versions
• Qualcomm Pm7150L: all versions
• Qualcomm Pm7250: all versions
• Qualcomm Pm7250B: all versions
• Qualcomm Pm7350C: all versions
• Qualcomm Pm8005: all versions
• Qualcomm Pm8008: all versions
• Qualcomm Pm8009: all versions
• Qualcomm Pm8150: all versions
• Qualcomm Pm8150A: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11150 or the next vulnerability affects your stack