CVE-2020-11183

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111849.8u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, CVE-2020-111857.8Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in CVE-2020-111865.5Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdr CVE-2020-111877.8Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdrag CVE-2020-111889.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-111899.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-11195.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully CVE-2020-111909.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-111919.1Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2020-111929.8Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2020-111939.8u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdra CVE-2020-111947.8Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Aut