CVE-2020-11274

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
May 7, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-112759.1Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon AutoCVE-2020-112769.1Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IECVE-2020-112777.4Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in SnapCVE-2020-112787.5Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2020-112799.8Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, SnapdragonCVE-2020-112807.5Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to impropCVE-2020-112817.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in SnCVE-2020-112827.8Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPUCVE-2020-112839.8A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2020-112847.8Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusteCVE-2020-112859.1Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, SnapCVE-2020-112866.8An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories
CVE-2020-11274: High severity, CVSS 7.5 | Vulnix