CVE-2020-11182

CRITICAL

Qualcomm AQT1000 and PMx Firmware - Heap Overflow via NAL Header Parsing

Title source: llm
STIX 2.1

Description

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0043
EPSS Percentile 62.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/pm3003a_firmware
qualcomm/pm4125_firmware
qualcomm/pm456_firmware
qualcomm/pm6125_firmware
qualcomm/pm6150_firmware
qualcomm/pm6150a_firmware
qualcomm/pm6150l_firmware
qualcomm/pm6250_firmware
qualcomm/pm6350_firmware
... and 40 more
Published Jun 09, 2021
Tracked Since Feb 18, 2026