CVE-2020-11136

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111379.8Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in poss CVE-2020-111389.8Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i CVE-2020-111397.5Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, S CVE-2020-11147.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfu CVE-2020-111409.8Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Comput CVE-2020-111418.1u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer devic CVE-2020-111439.8Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapd CVE-2020-111449.1Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon A CVE-2020-111457.5Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Sna CVE-2020-111467.8Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Comp CVE-2020-111476.7Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon CVE-2020-111486.7Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is trigg