CVE-2020-11187

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published
Feb 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111889.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111899.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-11195.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully CVE-2020-111909.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111919.1Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2020-111929.8Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2020-111939.8u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, SnapdraCVE-2020-111947.8Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon AutCVE-2020-111957.8Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in SnapCVE-2020-111969.8u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, SnapdCVE-2020-111979.8Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip wCVE-2020-111986.7Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset i
CVE-2020-11187: High severity, CVSS 7.8 | Vulnix