VULNERABILITY INTELLIGENCE
CVE-2020-11143
CVSS score9.8 CRITICAL
EPSS probability1.07%
CISA KEVNot currently listed
Published2021-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- product-security@qualcomm.com — Broken Link
- nvd@nist.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link