CVE-2020-11261

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787 CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2021
Last modified: Jun 17, 2026
Added to CISA KEV: Dec 1, 2021
NVD status: Analyzed

Related CVEs from 2020

CVE-2020-112627.0A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free is CVE-2020-112638.2An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connecti CVE-2020-112649.8Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapd CVE-2020-112655.5Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networki CVE-2020-112666.5Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastruct CVE-2020-112677.8Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, CVE-2020-112687.5Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Aut CVE-2020-112698.8Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdra CVE-2020-112707.5Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter CVE-2020-112717.8Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2020-112729.8Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can CVE-2020-112737.5Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when his