CVE-2020-11131

HIGH

Qualcomm Multiple Chipsets Firmware - Buffer Overflow via WMA Message Processing Integer Overflow

Title source: llm

Description

u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9250, MDM9628, MDM9640, MDM9650, MSM8996AU, QCS405, SDA845, SDX20, SDX20M, WCD9330

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Scores

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 16.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (14)

qualcomm/apq8009_firmware

qualcomm/apq8053_firmware

qualcomm/apq8096au_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9250_firmware

qualcomm/mdm9628_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8996au_firmware

qualcomm/qcs405_firmware

... and 4 more

Published Nov 12, 2020

Tracked Since Feb 18, 2026