What’s Vulnerable › Vulnerabilities

CVE-2020-11200

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-20

Description

Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm Apq8053: all versions
• Qualcomm Apq8064Au: all versions
• Qualcomm Apq8096Au: all versions
• Qualcomm Aqt1000: all versions
• Qualcomm Ar8151: all versions
• Qualcomm Mdm9640: all versions
• Qualcomm Mdm9650: all versions
• Qualcomm Msm8953: all versions
• Qualcomm Msm8996Au: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm4125: all versions
• Qualcomm Pm456: all versions
• Qualcomm Pm6125: all versions
• Qualcomm Pm6150: all versions
• Qualcomm Pm6150A: all versions
• Qualcomm Pm6150L: all versions
• Qualcomm Pm6250: all versions
• Qualcomm Pm6350: all versions
• Qualcomm Pm640A: all versions
• Qualcomm Pm640L: all versions
• Qualcomm Pm640P: all versions
• Qualcomm Pm660: all versions
• Qualcomm Pm660A: all versions
• Qualcomm Pm660L: all versions
• Qualcomm Pm670: all versions
• Qualcomm Pm670A: all versions
• Qualcomm Pm670L: all versions
• Qualcomm Pm7150A: all versions
• Qualcomm Pm7150L: all versions
• Qualcomm Pm7250: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11200 or the next vulnerability affects your stack