CVE-2020-11257

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-112588.8Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingCVE-2020-112598.8Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingCVE-2020-11268.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exCVE-2020-112608.4An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon MobileCVE-2020-112617.8Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, CVE-2020-112627.0A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free isCVE-2020-112638.2An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon ConnectiCVE-2020-112649.8Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in SnapdCVE-2020-112655.5Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and NetworkiCVE-2020-112666.5Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired InfrastructCVE-2020-112677.8Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, CVE-2020-112687.5Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Aut
CVE-2020-11257: High severity, CVSS 8.8 | Vulnix