CVE-2020-11145

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111467.8Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon CompCVE-2020-111476.7Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in SnapdragonCVE-2020-111486.7Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggCVE-2020-111496.7Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2020-11157.8<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">WindoCVE-2020-111506.7Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of poinCVE-2020-111516.4Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon ACVE-2020-111526.4Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects inCVE-2020-111539.8u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution'CVE-2020-111548.8u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon CVE-2020-111558.8u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon AutoCVE-2020-111568.1u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdrag