CVE-2020-11179

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-11188.6A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain CVE-2020-111807.8Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdra CVE-2020-111817.8Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snap CVE-2020-111829.8Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Com CVE-2020-111836.7A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in CVE-2020-111849.8u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, CVE-2020-111857.8Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in CVE-2020-111865.5Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdr CVE-2020-111877.8Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdrag CVE-2020-111889.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-111899.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-11195.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully