CVE-2020-11283

CRITICAL

Qualcomm Snapdragon - Out-of-bounds Write via MKV Clip Processing

Title source: llm

Description

A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Scores

CVSS v3 9.8

EPSS 0.0031

EPSS Percentile 54.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (50)

qualcomm/apq8009

qualcomm/apq8009w

qualcomm/apq8017

qualcomm/apq8053

qualcomm/apq8064au

qualcomm/apq8096au

qualcomm/aqt1000

qualcomm/ar8031

qualcomm/ar8151

qualcomm/csra6620

... and 40 more

Published Feb 22, 2021

Tracked Since Feb 18, 2026