CVE-2020-11261
high · 7.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2021-12-01Remediation due 2022-06-01
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
7.8
CVSS
1.8%
EPSS (exploit prob.)
77th
EPSS percentile
2021-06-09
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualcomm | apq8009_firmware | all versions |
| qualcomm | apq8009 | all versions |
| qualcomm | apq8009w_firmware | all versions |
| qualcomm | apq8009w | all versions |
| qualcomm | apq8017_firmware | all versions |
| qualcomm | apq8017 | all versions |
| qualcomm | apq8037_firmware | all versions |
| qualcomm | apq8037 | all versions |
| qualcomm | apq8053_firmware | all versions |
| qualcomm | apq8053 | all versions |
| qualcomm | apq8064au_firmware | all versions |
| qualcomm | apq8064au | all versions |
| qualcomm | apq8096au_firmware | all versions |
| qualcomm | apq8096au | all versions |
| qualcomm | aqt1000_firmware | all versions |
| qualcomm | aqt1000 | all versions |
| qualcomm | ar8031_firmware | all versions |
| qualcomm | ar8031 | all versions |
| qualcomm | ar8035_firmware | all versions |
| qualcomm | ar8035 | all versions |
| qualcomm | ar8151_firmware | all versions |
| qualcomm | ar8151 | all versions |
| qualcomm | csra6620_firmware | all versions |
| qualcomm | csra6620 | all versions |
| qualcomm | csra6640_firmware | all versions |
| qualcomm | csra6640 | all versions |
| qualcomm | csrb31024_firmware | all versions |
| qualcomm | csrb31024 | all versions |
| qualcomm | fsm10055_firmware | all versions |
| qualcomm | fsm10055 | all versions |
| qualcomm | fsm10056_firmware | all versions |
| qualcomm | fsm10056 | all versions |
| qualcomm | mdm9650_firmware | all versions |
| qualcomm | mdm9650 | all versions |
| qualcomm | msm8909w_firmware | all versions |
| qualcomm | msm8909w | all versions |
| qualcomm | msm8917_firmware | all versions |
| qualcomm | msm8917 | all versions |
| qualcomm | msm8920_firmware | all versions |
| qualcomm | msm8920 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-11261