peter bassill · operator
$ cve CVE-2020-11261 JSON

CVE-2020-11261 KEV

7.8
HIGH · CVSS 3.1 · EPSS 1.6% (pctl 75)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-01.

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS1.6% — more likely to be exploited than 75% of all CVEs
WeaknessCWE-787
On CISA KEVyes — remediate by 2022-06-01
Public exploitnone known
Published2021-06-09
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Improper Input Validation Vulnerability
Added2021-12-01
Due2022-06-01
Vendor / productQualcomm / Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, S
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommapq8009
qualcommapq8009 firmware
qualcommapq8009w
qualcommapq8009w firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommapq8037
qualcommapq8037 firmware
qualcommapq8053
qualcommapq8053 firmware
qualcommapq8064au
qualcommapq8064au firmware
qualcommapq8096au
qualcommapq8096au firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommar8151
qualcommar8151 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommcsrb31024
qualcommcsrb31024 firmware
qualcommfsm10055
qualcommfsm10055 firmware
qualcommfsm10056
qualcommfsm10056 firmware
qualcommmdm9650
qualcommmdm9650 firmware
qualcommmsm8909w
qualcommmsm8909w firmware
qualcommmsm8917
qualcommmsm8917 firmware
qualcommmsm8920
qualcommmsm8920 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD