CVE-2020-11172

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Wired Infrastructure and Networking	IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980

References

Timeline

Published: Nov 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111737.0u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, S CVE-2020-111747.8u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon CVE-2020-111757.8u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improp CVE-2020-111769.8While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which CVE-2020-111778.8User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapd CVE-2020-111787.8Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its CVE-2020-111797.0Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Aut CVE-2020-11188.6A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain CVE-2020-111807.8Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdra CVE-2020-111817.8Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snap CVE-2020-111829.8Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Com CVE-2020-111836.7A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in