CVE-2020-11174: Out-of-bounds Read
u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11174?
CVE-2020-11174 is classified with a high severity due to its potential to cause unauthorized access and compromises in affected devices.
How do I fix CVE-2020-11174?
To fix CVE-2020-11174, apply the latest firmware updates from Qualcomm or your device manufacturer that address this vulnerability.
Which devices are affected by CVE-2020-11174?
CVE-2020-11174 affects various Qualcomm chipsets found in devices running Android, including models like Snapdragon and other Qualcomm-specific firmware.
Is CVE-2020-11174 remotely exploitable?
Yes, CVE-2020-11174 can be remotely exploited, allowing attackers to potentially gain control of affected devices.
What are the potential impacts of CVE-2020-11174?
The potential impacts of CVE-2020-11174 include system instability, data corruption, and unauthorized data access.