CVE-2020-11176

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111778.8User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapd CVE-2020-111787.8Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its CVE-2020-111797.0Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Aut CVE-2020-11188.6A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain CVE-2020-111807.8Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdra CVE-2020-111817.8Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snap CVE-2020-111829.8Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Com CVE-2020-111836.7A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in CVE-2020-111849.8u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, CVE-2020-111857.8Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in CVE-2020-111865.5Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdr CVE-2020-111877.8Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdrag