What’s Vulnerable › Vulnerabilities

CVE-2020-11180

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-119

Description

Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm Aqt1000: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm6150: all versions
• Qualcomm Pm7150A: all versions
• Qualcomm Pm7150L: all versions
• Qualcomm Pm7250: all versions
• Qualcomm Pm7250B: all versions
• Qualcomm Pm8004: all versions
• Qualcomm Pm8008: all versions
• Qualcomm Pm8009: all versions
• Qualcomm Pm8150: all versions
• Qualcomm Pm8150A: all versions
• Qualcomm Pm8150B: all versions
• Qualcomm Pm8150C: all versions
• Qualcomm Pm8150L: all versions
• Qualcomm Pm8250: all versions
• Qualcomm Pm855: all versions
• Qualcomm Pm855B: all versions
• Qualcomm Pm855L: all versions
• Qualcomm Pm855P: all versions
• Qualcomm Pmc1000H: all versions
• Qualcomm Pmk8002: all versions
• Qualcomm Pmk8003: all versions
• Qualcomm Pmm6155Au: all versions
• Qualcomm Pmm8155Au: all versions
• Qualcomm Pmm8195Au: all versions
• Qualcomm Pmm855Au: all versions
• Qualcomm Pmr525: all versions
• Qualcomm Pmr735B: all versions
• Qualcomm Pmx50: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11180 or the next vulnerability affects your stack