CVE-2020-1119

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting the way in which StartTileData.dll handles objects in memory.</p>

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Sep 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111909.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111919.1Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2020-111929.8Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2020-111939.8u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, SnapdraCVE-2020-111947.8Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon AutCVE-2020-111957.8Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in SnapCVE-2020-111969.8u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, SnapdCVE-2020-111979.8Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip wCVE-2020-111986.7Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset iCVE-2020-111995.5HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in SnapdragoCVE-2020-11205.5A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnCVE-2020-112007.5Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdrago