CVE-2020-11286

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Feb 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-112877.5Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in SnCVE-2020-112887.8Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, SCVE-2020-112897.8Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2020-11298.8<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who CVE-2020-112907.0Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon ComCVE-2020-112919.8Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of CVE-2020-112927.8Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon CompCVE-2020-112936.0Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in SnCVE-2020-112947.8Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, SCVE-2020-112957.8Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, SnapdragCVE-2020-112967.5Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2020-112977.5Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdrago
CVE-2020-11286: Medium severity, CVSS 6.8 | Vulnix