CVE-2020-11307

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-113086.8Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, SnCVE-2020-113097.8Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, SnapCVE-2020-11315.5An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-11327.0An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links. An attacker whCVE-2020-11335.5<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attackeCVE-2020-11347.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-11357.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who sucCVE-2020-11367.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exCVE-2020-11377.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who sCVE-2020-11387.0An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully expCVE-2020-11397.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully eCVE-2020-11407.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited thi
CVE-2020-11307: Critical severity, CVSS 9.8 | Vulnix