CVE-2020-11180: Buffer Overflow

Published Jan 21, 2021
·
Updated

Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected Software

159 affected components
Google Android
QUALCOMM Aqt1000
QUALCOMM Pm3003a
QUALCOMM Pm6150
QUALCOMM Pm7150a
QUALCOMM Pm7150l
QUALCOMM Pm7250
QUALCOMM Pm7250b
QUALCOMM Pm8004
QUALCOMM Pm8008
QUALCOMM Pm8009
Qualcomm Pm8150
QUALCOMM Pm8150a
QUALCOMM Pm8150b
QUALCOMM Pm8150c
QUALCOMM Pm8150l
QUALCOMM Pm8250
QUALCOMM Pm855
QUALCOMM Pm855b
QUALCOMM Pm855l
QUALCOMM Pm855p
Qualcomm Pmc1000h
QUALCOMM Pmk8002
QUALCOMM Pmk8003
QUALCOMM Pmm6155au
QUALCOMM Pmm8155au
QUALCOMM Pmm8195au
QUALCOMM Pmm855au
QUALCOMM Pmr525
QUALCOMM Pmr735b
QUALCOMM Pmx50
QUALCOMM Pmx55
QUALCOMM Qat3516
QUALCOMM Qat3518
QUALCOMM Qat3519
QUALCOMM Qat3555
QUALCOMM Qat5515
QUALCOMM Qat5522
QUALCOMM Qat5533
QUALCOMM Qbt1500
QUALCOMM Qbt2000
QUALCOMM Qca6390
QUALCOMM Qca6391
QUALCOMM Qca6420
QUALCOMM Qca6421
QUALCOMM Qca6426
QUALCOMM Qca6430
Qualcomm Qca6431
QUALCOMM Qca6436
QUALCOMM QCA6574
QUALCOMM Qca6574a
QUALCOMM QCA6574AU
QUALCOMM Qca6595au
QUALCOMM Qca6696
QUALCOMM Qdm2301
QUALCOMM Qdm2305
QUALCOMM Qdm3301
QUALCOMM Qdm5620
QUALCOMM Qdm5621
QUALCOMM Qdm5650
QUALCOMM Qdm5652
QUALCOMM Qdm5670
QUALCOMM Qdm5671
QUALCOMM Qdm5677
Qualcomm Qdm5679
QUALCOMM Qet4101
QUALCOMM Qet5100
QUALCOMM Qet6110
QUALCOMM Qfs2530
QUALCOMM Qfs2580
QUALCOMM Qln4642
QUALCOMM Qln4650
QUALCOMM Qln5020
QUALCOMM Qln5030
QUALCOMM Qln5040
QUALCOMM Qpa2625
QUALCOMM Qpa5580
QUALCOMM Qpa6560
QUALCOMM Qpa8673
QUALCOMM Qpa8686
QUALCOMM Qpa8801
QUALCOMM Qpa8802
QUALCOMM Qpa8803
QUALCOMM Qpa8821
QUALCOMM Qpa8842
QUALCOMM Qpm4650
QUALCOMM Qpm5620
QUALCOMM Qpm5621
QUALCOMM Qpm5657
QUALCOMM Qpm5658
QUALCOMM Qpm5670
QUALCOMM Qpm5677
QUALCOMM Qpm5679
QUALCOMM Qpm6582
QUALCOMM Qpm6585
QUALCOMM Qpm8820
QUALCOMM Qpm8830
QUALCOMM Qpm8895
QUALCOMM Qsm7250
QUALCOMM Qsm8250
QUALCOMM Qtc800h
QUALCOMM Qtc801s
QUALCOMM Qtm525
QUALCOMM Sa6145p
QUALCOMM Sa6150p
QUALCOMM Sa6155
QUALCOMM Sa6155p
Qualcomm Sa8150p
QUALCOMM Sa8155
QUALCOMM Sa8155p
QUALCOMM Sa8195p
QUALCOMM Sc8180x\+sdx55
QUALCOMM Sd730
QUALCOMM Sd765
QUALCOMM Sd765g
QUALCOMM Sd768g
QUALCOMM Sd855
Qualcomm Sd8655g
Qualcomm Sd8c
Qualcomm Sd8cx
QUALCOMM Sdr051
QUALCOMM Sdr052
Qualcomm Sdr660
Qualcomm Sdr735
Qualcomm Sdr8150
Qualcomm Sdr8250
Qualcomm Sdr865
QUALCOMM Sdx50m
Qualcomm Sdx55
QUALCOMM Sdx55m
Qualcomm Sdxr25g
QUALCOMM Sm7250p
Qualcomm Smb1355
QUALCOMM Smb1381
Qualcomm Smb1390
Qualcomm Smb1395
Qualcomm Smb2351
QUALCOMM Smr525
Qualcomm Smr526
Qualcomm Wcd9340
Qualcomm Wcd9341
Qualcomm Wcd9370
Qualcomm Wcd9371
Qualcomm Wcd9375
Qualcomm Wcd9380
Qualcomm Wcd9385
QUALCOMM Wcn3910
QUALCOMM Wcn3980
Qualcomm Wcn3988
QUALCOMM Wcn3990
QUALCOMM Wcn3991
QUALCOMM Wcn3998
QUALCOMM Wcn6750
QUALCOMM Wcn6850
QUALCOMM Wcn6851
Qualcomm Wsa8810
Qualcomm Wsa8815
Qualcomm Wsa8830
Qualcomm Wsa8835

Event History

Jan 21, 2021
CVE Published
via MITRE·09:41 AM
Data Sourced
via MITRE·09:41 AM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-11180?

CVE-2020-11180 has been classified with a high severity due to its potential for out-of-bounds access in vulnerable Qualcomm components.

2

How do I fix CVE-2020-11180?

To fix CVE-2020-11180, update to the latest software version that mitigates this vulnerability as detailed in the vendor's security bulletins.

3

What types of devices are affected by CVE-2020-11180?

CVE-2020-11180 affects various Qualcomm Snapdragon components used across devices such as smartphones, IoT products, and automotive systems.

4

Is CVE-2020-11180 actively being exploited?

As of the latest information, there have been no confirmed active exploits reported for CVE-2020-11180.

5

What should I do if I am using a device vulnerable to CVE-2020-11180?

If you are using a device vulnerable to CVE-2020-11180, you should immediately apply available updates from your device manufacturer to mitigate the risk.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203