CVE-2020-11181

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-21 · updated 2026-06-17
Weakness: CWE-119

Description

Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

Qualcomm Pm3003A Firmware: all versions
Qualcomm Pm8009 Firmware: all versions
Qualcomm Pm8150A Firmware: all versions
Qualcomm Pm8150B Firmware: all versions
Qualcomm Pm8150C Firmware: all versions
Qualcomm Pm8150L Firmware: all versions
Qualcomm Pm8250 Firmware: all versions
Qualcomm Pmk8002 Firmware: all versions
Qualcomm Pmr525 Firmware: all versions
Qualcomm Pmx55 Firmware: all versions
Qualcomm Qbt2000 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6421 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6431 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qfs2530 Firmware: all versions
Qualcomm Qfs2580 Firmware: all versions
Qualcomm Qsm8250 Firmware: all versions
Qualcomm Qtc800H Firmware: all versions
Qualcomm Qtc801S Firmware: all versions
Qualcomm Sd865 5G Firmware: all versions
Qualcomm Sdr8250 Firmware: all versions
Qualcomm Sdr865 Firmware: all versions
Qualcomm Sdx55 Firmware: all versions
Qualcomm Sdx55M Firmware: all versions
Qualcomm Sdxr2 5G Firmware: all versions
Qualcomm Smb1355 Firmware: all versions
Qualcomm Smb1390 Firmware: all versions

References

Get alerted when CVE-2020-11181 or the next vulnerability affects your stack