high7.8Known exploited
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-12-01. Federal due date: 2022-06-01.
Apply updates per vendor instructions.
Impact
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Apq8009 Firmware | All versions |
| Qualcomm | Apq8009w Firmware | All versions |
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Apq8037 Firmware | All versions |
| Qualcomm | Apq8053 Firmware | All versions |
| Qualcomm | Apq8064au Firmware | All versions |
| Qualcomm | Apq8096au Firmware | All versions |
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Ar8031 Firmware | All versions |
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Ar8151 Firmware | All versions |
| Qualcomm | Csra6620 Firmware | All versions |