CVE-2020-11210

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-07 · updated 2026-06-17
Weakness: CWE-787

Description

Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Ar8035 Firmware: all versions
Qualcomm Pm4125 Firmware: all versions
Qualcomm Pm4250 Firmware: all versions
Qualcomm Pm6125 Firmware: all versions
Qualcomm Pm6150A Firmware: all versions
Qualcomm Pm6150L Firmware: all versions
Qualcomm Pm6350 Firmware: all versions
Qualcomm Pm7250B Firmware: all versions
Qualcomm Pm8008 Firmware: all versions
Qualcomm Pmd9655 Firmware: all versions
Qualcomm Pmi632 Firmware: all versions
Qualcomm Pmk8003 Firmware: all versions
Qualcomm Qat3519 Firmware: all versions
Qualcomm Qat3522 Firmware: all versions
Qualcomm Qat3555 Firmware: all versions
Qualcomm Qat5515 Firmware: all versions
Qualcomm Qat5516 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca9984 Firmware: all versions
Qualcomm Qcm2290 Firmware: all versions
Qualcomm Qcm4290 Firmware: all versions
Qualcomm Qcs2290 Firmware: all versions
Qualcomm Qcs405 Firmware: all versions
Qualcomm Qcs4290 Firmware: all versions
Qualcomm Qdm2301 Firmware: all versions
Qualcomm Qdm2302 Firmware: all versions
Qualcomm Qet4101 Firmware: all versions
Qualcomm Qet6105 Firmware: all versions
Qualcomm Qpa4360 Firmware: all versions
Qualcomm Qpa4361 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin
https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Get alerted when CVE-2020-11210 or the next vulnerability affects your stack