CVE-2020-11184

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-12 · updated 2026-06-17
Weakness: CWE-190

Description

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Affected products

Qualcomm Qcm4290 Firmware: all versions
Qualcomm Qcs4290 Firmware: all versions
Qualcomm Qm215 Firmware: all versions
Qualcomm Qsm8350 Firmware: all versions
Qualcomm Sa6145P Firmware: all versions
Qualcomm Sa6155 Firmware: all versions
Qualcomm Sa6155P Firmware: all versions
Qualcomm Sa8155 Firmware: all versions
Qualcomm Sa8155P Firmware: all versions
Qualcomm Sdx55 Firmware: all versions
Qualcomm Sdx55M Firmware: all versions
Qualcomm Sm4250 Firmware: all versions
Qualcomm Sm4250P Firmware: all versions
Qualcomm Sm6115 Firmware: all versions
Qualcomm Sm6115P Firmware: all versions
Qualcomm Sm6125 Firmware: all versions
Qualcomm Sm6250 Firmware: all versions
Qualcomm Sm6350 Firmware: all versions
Qualcomm Sm7125 Firmware: all versions
Qualcomm Sm7225 Firmware: all versions
Qualcomm Sm7250 Firmware: all versions
Qualcomm Sm7250P Firmware: all versions
Qualcomm Sm8150 Firmware: all versions
Qualcomm Sm8150P Firmware: all versions
Qualcomm Sm8250 Firmware: all versions
Qualcomm Sm8350 Firmware: all versions
Qualcomm Sm8350P Firmware: all versions
Qualcomm Sxr2130 Firmware: all versions
Qualcomm Sxr2130P Firmware: all versions

References

Get alerted when CVE-2020-11184 or the next vulnerability affects your stack