{"id":"CVE-2020-11181","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11181","generatedAt":"2026-10-27T22:28:50.247Z","title":"Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","description":"Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","published":"2021-01-21T10:15:14.000Z","lastModified":"2026-06-17T02:49:24.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["qualcomm/pm3003a firmware","qualcomm/pm8009 firmware","qualcomm/pm8150a firmware","qualcomm/pm8150b firmware","qualcomm/pm8150c firmware","qualcomm/pm8150l firmware","qualcomm/pm8250 firmware","qualcomm/pmk8002 firmware","qualcomm/pmr525 firmware","qualcomm/pmx55 firmware","qualcomm/qbt2000 firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6421 firmware","qualcomm/qca6426 firmware","qualcomm/qca6431 firmware","qualcomm/qca6436 firmware","qualcomm/qfs2530 firmware","qualcomm/qfs2580 firmware","qualcomm/qsm8250 firmware","qualcomm/qtc800h firmware","qualcomm/qtc801s firmware","qualcomm/sd865 5g firmware","qualcomm/sdr8250 firmware","qualcomm/sdr865 firmware","qualcomm/sdx55 firmware","qualcomm/sdx55m firmware","qualcomm/sdxr2 5g firmware","qualcomm/smb1355 firmware","qualcomm/smb1390 firmware","qualcomm/smr525 firmware","qualcomm/smr526 firmware","qualcomm/wcd9380 firmware","qualcomm/wcd9385 firmware","qualcomm/wcn6750 firmware","qualcomm/wcn6850 firmware","qualcomm/wcn6851 firmware","qualcomm/wsa8810 firmware","qualcomm/wsa8815 firmware"],"epss":{"score":0.00211,"percentile":0.11264,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin","tags":["Broken Link"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11181","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}