CVE-2020-11161

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111627.8u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in SnapdragoCVE-2020-111639.8Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the eCVE-2020-111647.8u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in SnapdragoCVE-2020-111657.8Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in SCVE-2020-111669.1Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in SnapdragoCVE-2020-111679.8Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, SnCVE-2020-111689.8u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in SnapdrCVE-2020-111699.1u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, SnaCVE-2020-11178.8A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. An attacker CVE-2020-111709.8Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in SnapdragCVE-2020-111719.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111729.8u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdra