CVE-2020-11186

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-17 · updated 2026-06-17
Weakness: CWE-835

Description

Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected products

Qualcomm Csrb31024 Firmware: all versions
Qualcomm Pm3003A Firmware: all versions
Qualcomm Pm7150A Firmware: all versions
Qualcomm Pm7150L Firmware: all versions
Qualcomm Pm7250 Firmware: all versions
Qualcomm Pm7250B Firmware: all versions
Qualcomm Pm8008 Firmware: all versions
Qualcomm Pm8009 Firmware: all versions
Qualcomm Pm8150A Firmware: all versions
Qualcomm Pm8150B Firmware: all versions
Qualcomm Pm8150C Firmware: all versions
Qualcomm Pm8150L Firmware: all versions
Qualcomm Pm8250 Firmware: all versions
Qualcomm Pmk8002 Firmware: all versions
Qualcomm Pmr525 Firmware: all versions
Qualcomm Pmx24 Firmware: all versions
Qualcomm Pmx55 Firmware: all versions
Qualcomm Qat3516 Firmware: all versions
Qualcomm Qat3518 Firmware: all versions
Qualcomm Qat3519 Firmware: all versions
Qualcomm Qat3555 Firmware: all versions
Qualcomm Qat5515 Firmware: all versions
Qualcomm Qat5522 Firmware: all versions
Qualcomm Qat5533 Firmware: all versions
Qualcomm Qbt2000 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6421 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6431 Firmware: all versions

References

Get alerted when CVE-2020-11186 or the next vulnerability affects your stack