CVE-2020-11184

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile	QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

References

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinVendor Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111857.8Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in CVE-2020-111865.5Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdr CVE-2020-111877.8Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdrag CVE-2020-111889.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-111899.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-11195.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully CVE-2020-111909.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co CVE-2020-111919.1Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2020-111929.8Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2020-111939.8u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdra CVE-2020-111947.8Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Aut CVE-2020-111957.8Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snap