CVE-2020-11279

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: May 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-112807.5Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improp CVE-2020-112817.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Sn CVE-2020-112827.8Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU CVE-2020-112839.8A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2020-112847.8Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untruste CVE-2020-112859.1Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snap CVE-2020-112866.8An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories CVE-2020-112877.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Sn CVE-2020-112887.8Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, S CVE-2020-112897.8Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdrago CVE-2020-11298.8<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who CVE-2020-112907.0Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Com