CVE-2020-11127: Buffer Overflow
u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCM4290, QCS405, QCS410, QCS4290, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA845, SDA855, SDM1000, SDM640, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11127?
CVE-2020-11127 has a high severity rating due to the potential for buffer overflow leading to arbitrary code execution.
How do I fix CVE-2020-11127?
Updating the affected Qualcomm firmware or applying the security patches provided by the vendor will mitigate CVE-2020-11127.
What products are affected by CVE-2020-11127?
CVE-2020-11127 affects multiple Qualcomm products including Snapdragon Auto and Snapdragon Compute firmware.
Can CVE-2020-11127 lead to remote exploitation?
Yes, CVE-2020-11127 can potentially be exploited remotely if an attacker can send malicious inputs to the affected components.
Is CVE-2020-11127 specific to certain Android versions?
CVE-2020-11127 is relevant to Android devices using the Qualcomm chipsets mentioned, particularly those running vulnerable firmware versions.