CVE-2020-11187

HIGH

Qualcomm Firmware - Memory Corruption in BSI Module via Improper Parameter Count Validation

Title source: llm

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 11.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-129

Status published

Products (50)

qualcomm/aqt1000_firmware

qualcomm/csrb31024_firmware

qualcomm/pm7150a_firmware

qualcomm/pm7150l_firmware

qualcomm/pm7250_firmware

qualcomm/pm7250b_firmware

qualcomm/pm8004_firmware

qualcomm/pm8008_firmware

qualcomm/pm855_firmware

qualcomm/pm855b_firmware

... and 40 more

Published Feb 22, 2021

Tracked Since Feb 18, 2026