CVE-2020-11305

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Mar 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-113067.8Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdrag CVE-2020-113079.8Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect CVE-2020-113086.8Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Sn CVE-2020-113097.8Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snap CVE-2020-11315.5An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker w CVE-2020-11327.0An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links. An attacker wh CVE-2020-11335.5<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacke CVE-2020-11347.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker w CVE-2020-11357.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who suc CVE-2020-11367.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully ex CVE-2020-11377.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who s CVE-2020-11387.0An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exp