CVE-2020-11252

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Apr 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-112537.8Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv CVE-2020-112545.5Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto,CVE-2020-112557.5Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the CVE-2020-112568.8Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Network CVE-2020-112578.8Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking CVE-2020-112588.8Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking CVE-2020-112598.8Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking CVE-2020-11268.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully ex CVE-2020-112608.4An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile CVE-2020-112617.8Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, CVE-2020-112627.0A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free is CVE-2020-112638.2An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connecti