CVE-2020-11186: Medium severity Google Android vulnerability
Published Mar 1, 2021
·Updated
Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected Software
227 affected components
Google Android
Qualcomm Csrb31024 Firmware
Qualcomm Csrb31024
Qualcomm Pm3003a Firmware
Qualcomm Pm3003a
Qualcomm Pm7150a Firmware
Qualcomm Pm7150a
Qualcomm Pm7150l Firmware
Qualcomm Pm7150l
Qualcomm Pm7250 Firmware
Qualcomm Pm7250
Qualcomm Pm7250b Firmware
Qualcomm Pm7250b
Qualcomm Pm8008 Firmware
Qualcomm Pm8008
Qualcomm Pm8009 Firmware
Qualcomm Pm8009
Qualcomm Pm8150a Firmware
Qualcomm Pm8150a
Qualcomm Pm8150b Firmware
Qualcomm Pm8150b
Qualcomm Pm8150c Firmware
Qualcomm Pm8150c
Qualcomm Pm8150l Firmware
Qualcomm Pm8150l
Qualcomm Pm8250 Firmware
Qualcomm Pm8250
Qualcomm Pmk8002 Firmware
Qualcomm Pmk8002
Qualcomm Pmr525 Firmware
Qualcomm Pmr525
Qualcomm Pmx24 Firmware
Qualcomm Pmx24
Qualcomm Pmx55 Firmware
Qualcomm Pmx55
Qualcomm Qat3516 Firmware
Qualcomm Qat3516
Qualcomm Qat3518 Firmware
Qualcomm Qat3518
Qualcomm Qat3519 Firmware
Qualcomm Qat3519
Qualcomm Qat3555 Firmware
Qualcomm Qat3555
Qualcomm Qat5515 Firmware
Qualcomm Qat5515
Qualcomm Qat5522 Firmware
Qualcomm Qat5522
Qualcomm Qat5533 Firmware
Qualcomm Qat5533
Qualcomm Qbt2000 Firmware
Qualcomm Qbt2000
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6421 Firmware
Qualcomm Qca6421
Qualcomm Qca6426 Firmware
Qualcomm Qca6426
Qualcomm Qca6431 Firmware
Qualcomm Qca6431
Qualcomm Qca6436 Firmware
Qualcomm Qca6436
Qualcomm Qca6564au Firmware
Qualcomm Qca6564au
Qualcomm Qca6574a Firmware
Qualcomm Qca6574a
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
Qualcomm Qca6595au Firmware
Qualcomm Qca6595au
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
Qualcomm Qdm2301 Firmware
Qualcomm Qdm2301
Qualcomm Qdm2305 Firmware
Qualcomm Qdm2305
Qualcomm Qdm3301 Firmware
Qualcomm Qdm3301
Qualcomm Qdm5620 Firmware
Qualcomm Qdm5620
Qualcomm Qdm5621 Firmware
Qualcomm Qdm5621
Qualcomm Qdm5650 Firmware
Qualcomm Qdm5650
Qualcomm Qdm5652 Firmware
Qualcomm Qdm5652
Qualcomm Qdm5670 Firmware
Qualcomm Qdm5670
Qualcomm Qdm5671 Firmware
Qualcomm Qdm5671
Qualcomm Qdm5677 Firmware
Qualcomm Qdm5677
Qualcomm Qdm5679 Firmware
Qualcomm Qdm5679
Qualcomm Qet4101 Firmware
Qualcomm Qet4101
Qualcomm Qet5100 Firmware
Qualcomm Qet5100
Qualcomm Qet6110 Firmware
Qualcomm Qet6110
Qualcomm Qfs2530 Firmware
Qualcomm Qfs2530
Qualcomm Qfs2580 Firmware
Qualcomm Qfs2580
Qualcomm Qln1021aq Firmware
Qualcomm Qln1021aq
Qualcomm Qln1031 Firmware
Qualcomm Qln1031
Qualcomm Qln1036aq Firmware
Qualcomm Qln1036aq
Qualcomm Qln4642 Firmware
Qualcomm Qln4642
Qualcomm Qln4650 Firmware
Qualcomm Qln4650
Qualcomm Qln5020 Firmware
Qualcomm Qln5020
Qualcomm Qln5030 Firmware
Qualcomm Qln5030
Qualcomm Qln5040 Firmware
Qualcomm Qln5040
Qualcomm Qpa2625 Firmware
Qualcomm Qpa2625
Qualcomm Qpa5580 Firmware
Qualcomm Qpa5580
Qualcomm Qpa6560 Firmware
Qualcomm Qpa6560
Qualcomm Qpa8673 Firmware
Qualcomm Qpa8673
Qualcomm Qpa8686 Firmware
Qualcomm Qpa8686
Qualcomm Qpa8801 Firmware
Qualcomm Qpa8801
Qualcomm Qpa8802 Firmware
Qualcomm Qpa8802
Qualcomm Qpa8803 Firmware
Qualcomm Qpa8803
Qualcomm Qpa8821 Firmware
Qualcomm Qpa8821
Qualcomm Qpa8842 Firmware
Qualcomm Qpa8842
Qualcomm Qpm5621 Firmware
Qualcomm Qpm5621
Qualcomm Qpm5658 Firmware
Qualcomm Qpm5658
Qualcomm Qpm5670 Firmware
Qualcomm Qpm5670
Qualcomm Qpm5677 Firmware
Qualcomm Qpm5677
Qualcomm Qpm5679 Firmware
Qualcomm Qpm5679
Qualcomm Qpm6582 Firmware
Qualcomm Qpm6582
Qualcomm Qpm6585 Firmware
Qualcomm Qpm6585
Qualcomm Qpm8830 Firmware
Qualcomm Qpm8830
Qualcomm Qpm8895 Firmware
Qualcomm Qpm8895
Qualcomm Qtc800h Firmware
Qualcomm Qtc800h
Qualcomm Qtc801s Firmware
Qualcomm Qtc801s
Qualcomm Qtm525 Firmware
Qualcomm Qtm525
Qualcomm Qtm527 Firmware
Qualcomm Qtm527
Qualcomm Sa2150p Firmware
Qualcomm Sa2150p
Qualcomm Sa415m Firmware
Qualcomm Sa415m
Qualcomm Sa515m Firmware
Qualcomm Sa515m
Qualcomm Sd765 Firmware
Qualcomm Sd765
Qualcomm Sd765g Firmware
Qualcomm Sd765g
Qualcomm Sd768g Firmware
Qualcomm Sd768g
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
Qualcomm Sd870 Firmware
Qualcomm Sd870
Qualcomm Sdr8150 Firmware
Qualcomm Sdr8150
Qualcomm Sdr8250 Firmware
Qualcomm Sdr8250
Qualcomm Sdr865 Firmware
Qualcomm Sdr865
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
Qualcomm Sdxr2 5g Firmware
Qualcomm Sdxr2 5g
Qualcomm Sm7250p Firmware
Qualcomm Sm7250p
Qualcomm Smb1355 Firmware
Qualcomm Smb1355
Qualcomm Smb1381 Firmware
Qualcomm Smb1381
Qualcomm Smb1390 Firmware
Qualcomm Smb1390
Qualcomm Smr525 Firmware
Qualcomm Smr525
Qualcomm Smr526 Firmware
Qualcomm Smr526
Qualcomm Wcd9341 Firmware
Qualcomm Wcd9341
Qualcomm Wcd9360 Firmware
Qualcomm Wcd9360
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3991 Firmware
Qualcomm Wcn3991
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Event History
Mar 1, 2021
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Mar 17, 2021
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-11186?
CVE-2020-11186 has a high severity due to its potential to cause an infinite loop when parsing histogram dimensions.
2
How do I fix CVE-2020-11186?
To fix CVE-2020-11186, update your Qualcomm firmware to the latest version provided by the vendor.
3
What systems are affected by CVE-2020-11186?
CVE-2020-11186 affects various Qualcomm modem firmware and certain Android devices relying on the affected firmware.
4
What are the potential exploits of CVE-2020-11186?
Exploitation of CVE-2020-11186 could lead to denial of service as the modem may repeatedly enter a busy mode.
5
Are there any workarounds for CVE-2020-11186?
Currently, there are no documented workarounds for CVE-2020-11186; updating the firmware is the recommended action.