What is the severity of CVE-2020-11180?

CVE-2020-11180 has been classified with a high severity due to its potential for out-of-bounds access in vulnerable Qualcomm components.

How do I fix CVE-2020-11180?

To fix CVE-2020-11180, update to the latest software version that mitigates this vulnerability as detailed in the vendor's security bulletins.

What types of devices are affected by CVE-2020-11180?

CVE-2020-11180 affects various Qualcomm Snapdragon components used across devices such as smartphones, IoT products, and automotive systems.

Is CVE-2020-11180 actively being exploited?

As of the latest information, there have been no confirmed active exploits reported for CVE-2020-11180.

What should I do if I am using a device vulnerable to CVE-2020-11180?

If you are using a device vulnerable to CVE-2020-11180, you should immediately apply available updates from your device manufacturer to mitigate the risk.

Vulnerability/
CVE-2020-11180

high

7.8

CWE

119

21/1/2021

26/8/2024

CVE-2020-11180: Buffer Overflow

First published: Thu Jan 21 2021(Updated: )

Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Android
Qualcomm AQT1000 Firmware
Qualcomm pm3003a firmware
Qualcomm PM6150 Firmware
Qualcomm Pm7150a Firmware
Qualcomm pm7150l firmware
Qualcomm PM7250 Firmware
Qualcomm PM7250B Firmware
Qualcomm PM8004 Firmware
Qualcomm PM8008 Firmware
Qualcomm PM8009
Qualcomm PM8150B
Qualcomm PM8150A Firmware
Qualcomm PM8150B Firmware
Qualcomm PM8150C Firmware
Qualcomm PM8150L
Qualcomm PM8250 Firmware
Qualcomm PM855P
Qualcomm PM855B
Qualcomm pm855l firmware
Qualcomm PM855P
Qualcomm PMC1000H Firmware
Qualcomm PMK8002 Firmware
Qualcomm pmk8003 firmware
Qualcomm PMM6155AU Firmware
Qualcomm PMM8155AU Firmware
Qualcomm PMM8195AU firmware
Qualcomm PM855 Firmware
Qualcomm PMR525 Firmware
Qualcomm PMR735B
Qualcomm PMX50
Qualcomm PMX55
Qualcomm qat3516 firmware
Qualcomm QAT 3518
Qualcomm QAT3519 Firmware
Qualcomm QAT 3555 Firmware
Qualcomm QAT 5515 Firmware
Qualcomm QAT 5522
Qualcomm qat5533 firmware
Qualcomm qbt1500 firmware
Qualcomm QBT2000
Qualcomm QCA6390 Firmware
Qualcomm QCA6391 Firmware
Qualcomm QCA6420 Firmware
Qualcomm QCA6421 Firmware
Qualcomm QCA6426 Firmware
Qualcomm QCA6430 firmware
Qualcomm QCA6431
Qualcomm QCA6436 Firmware
Qualcomm QCA6574 Firmware
qualcomm qca6574a firmware
Qualcomm QCA6574AU
Qualcomm QCA6595AU Firmware
Qualcomm QCA6696 Firmware
Qualcomm QDM2301 Firmware
Qualcomm QDM2305 Firmware
Qualcomm QDM3301 Firmware
Qualcomm qdm5620 firmware
Qualcomm QDM5621
Qualcomm QDM5650
Qualcomm QDM5652
Qualcomm qdm5670 firmware
Qualcomm qdm5671 firmware
Qualcomm qdm5677 firmware
Qualcomm qdm5679 firmware
Qualcomm QET4101 Firmware
Qualcomm QET5100 Firmware
Qualcomm QET6110 Firmware
Qualcomm QFS2530
Qualcomm QFS2580
Qualcomm QLN4642 Firmware
Qualcomm QLN4650
Qualcomm QLN5020 Firmware
Qualcomm QLN5030 Firmware
Qualcomm QLN5040 Firmware
Qualcomm qpa2625 firmware
Qualcomm QPA5580 Firmware
Qualcomm qpa6560 firmware
Qualcomm qpa8673 firmware
Qualcomm QPA8686 Firmware
Qualcomm qpa8801 firmware
Qualcomm QPA8802
Qualcomm qpa8803 firmware
Qualcomm QPA8821 Firmware
Qualcomm qpa8842 firmware
Qualcomm QPM4650 Firmware
Qualcomm QPM5620 Firmware
Qualcomm QPM5621 Firmware
Qualcomm qpm5657 firmware
Qualcomm qpm5658 firmware
Qualcomm QPM5670
Qualcomm QPM5677 Firmware
Qualcomm QPM5679
Qualcomm qpm6582 firmware
Qualcomm QPM6585 Firmware
Qualcomm QPM8820
Qualcomm QPM8830 Firmware
Qualcomm QPM8895 Firmware
Qualcomm SM7250
Qualcomm QSM8250
Qualcomm QTC800H Firmware
Qualcomm QTC801S Firmware
Qualcomm QTM525 Firmware
Qualcomm SA6145P Firmware
Qualcomm SA6150P Firmware
Qualcomm SA6155 Firmware
Qualcomm SA6155P
Qualcomm SA8150P Firmware
Qualcomm SA8155 Firmware
Qualcomm SA8155P Firmware
Qualcomm SA8195P Firmware
Qualcomm SC8180X+SDX55
Qualcomm Snapdragon 730
Qualcomm Snapdragon 765
Qualcomm Snapdragon 765G
Qualcomm SD768G Firmware
Qualcomm Snapdragon 855
Qualcomm Snapdragon 865 5G
Qualcomm SD 8C Firmware
Qualcomm Snapdragon 8cx
Qualcomm SDR051 Firmware
Qualcomm SDR052
Qualcomm SDR660
Qualcomm SDR735G Firmware
Qualcomm SDR8150 Firmware
Qualcomm SDR8250 firmware
Qualcomm SDR865
Qualcomm SDX50M Firmware
Qualcomm SDX55 Firmware
Qualcomm SDX55M Firmware
Qualcomm SDXR25G Firmware
Qualcomm SM7250
Qualcomm SMB1355 Firmware
Qualcomm SMB1381 Firmware
Qualcomm SMB1390 Firmware
Qualcomm SMB1395 Firmware
Qualcomm SMB2351 Firmware
Qualcomm SMR525 Firmware
Qualcomm SMR526
Qualcomm WCD9340 Firmware
Qualcomm WCD9341 Firmware
Qualcomm WCD9370 Firmware
Qualcomm WCD9371 Firmware
Qualcomm WCD9375 Firmware
Qualcomm WCD9380 Firmware
Qualcomm WCD9385 Firmware
Qualcomm WCN3910 Firmware
Qualcomm WCN3980
Qualcomm WCN3988 Firmware
Qualcomm WCN3990
Qualcomm WCN3991 Firmware
Qualcomm wcn3998 firmware
Qualcomm WCN6750 Firmware
Qualcomm WCN6850 Firmware
Qualcomm WCN6851 Firmware
Qualcomm WSA8810 Firmware
Qualcomm WSA8815 Firmware
Qualcomm WSA8830
Qualcomm WSA8835 Firmware

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2020-11180?
CVE-2020-11180 has been classified with a high severity due to its potential for out-of-bounds access in vulnerable Qualcomm components.
How do I fix CVE-2020-11180?
To fix CVE-2020-11180, update to the latest software version that mitigates this vulnerability as detailed in the vendor's security bulletins.
What types of devices are affected by CVE-2020-11180?
CVE-2020-11180 affects various Qualcomm Snapdragon components used across devices such as smartphones, IoT products, and automotive systems.
Is CVE-2020-11180 actively being exploited?
As of the latest information, there have been no confirmed active exploits reported for CVE-2020-11180.
What should I do if I am using a device vulnerable to CVE-2020-11180?
If you are using a device vulnerable to CVE-2020-11180, you should immediately apply available updates from your device manufacturer to mitigate the risk.