CVE-2020-11128

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

References

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinBroken Link, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinBroken Link, Vendor Advisory

Timeline

Published: Sep 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111297.8u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-af CVE-2020-11135.3A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connecti CVE-2020-111307.8u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Comput CVE-2020-111317.8u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Sna CVE-2020-111327.1u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon CVE-2020-111337.8u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, S CVE-2020-111349.8Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup at CVE-2020-111357.5u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu CVE-2020-111369.8Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapd CVE-2020-111379.8Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in poss CVE-2020-111389.8Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i CVE-2020-111397.5Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, S