CVE-2020-11254: Null Pointer Dereference
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2021-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11254?
CVE-2020-11254 is rated as high severity due to its potential for memory corruption.
How do I fix CVE-2020-11254?
To fix CVE-2020-11254, apply the latest firmware updates provided by Qualcomm for affected devices.
What devices are affected by CVE-2020-11254?
CVE-2020-11254 affects various Snapdragon models including PM6150A, PM6350, and several others.
What type of vulnerability is CVE-2020-11254?
CVE-2020-11254 is a memory corruption vulnerability caused by dereferencing an invalid session context pointer.
Is CVE-2020-11254 being actively exploited?
As of the latest information, there is no evidence indicating that CVE-2020-11254 is actively being exploited in the wild.