CVE-2020-11236

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-07 · updated 2026-06-17
Weakness: CWE-787

Description

Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Affected products

Qualcomm Csrb31024 Firmware: all versions
Qualcomm Pm3003A Firmware: all versions
Qualcomm Pm6150A Firmware: all versions
Qualcomm Pm6150L Firmware: all versions
Qualcomm Pm6350 Firmware: all versions
Qualcomm Pm7150A Firmware: all versions
Qualcomm Pm7150L Firmware: all versions
Qualcomm Pm7250 Firmware: all versions
Qualcomm Pm7250B Firmware: all versions
Qualcomm Pm8008 Firmware: all versions
Qualcomm Pm8009 Firmware: all versions
Qualcomm Pm8150A Firmware: all versions
Qualcomm Pm8150B Firmware: all versions
Qualcomm Pm8150C Firmware: all versions
Qualcomm Pm8150L Firmware: all versions
Qualcomm Pm8250 Firmware: all versions
Qualcomm Pm8350 Firmware: all versions
Qualcomm Pm8350B Firmware: all versions
Qualcomm Pm8350Bh Firmware: all versions
Qualcomm Pm8350C Firmware: all versions
Qualcomm Pm855 Firmware: all versions
Qualcomm Pm855B Firmware: all versions
Qualcomm Pm855L Firmware: all versions
Qualcomm Pmk8002 Firmware: all versions
Qualcomm Pmk8003 Firmware: all versions
Qualcomm Pmk8350 Firmware: all versions
Qualcomm Pmr525 Firmware: all versions
Qualcomm Pmr735A Firmware: all versions
Qualcomm Pmr735B Firmware: all versions
Qualcomm Pmx24 Firmware: all versions

References

Get alerted when CVE-2020-11236 or the next vulnerability affects your stack