CVE-2020-11218

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

No affected versions have been published.

Timeline

Published: Mar 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-11225.5<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker w CVE-2020-112206.4While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific tim CVE-2020-112215.5Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient chec CVE-2020-112229.1Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2020-112237.8Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Com CVE-2020-112259.8Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Comput CVE-2020-112267.5Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2020-112279.8Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, S CVE-2020-112287.8Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdrag CVE-2020-11235.5A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attack CVE-2020-112306.4Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address CVE-2020-112316.7Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap