{"id":"CVE-2020-11182","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11182","generatedAt":"2026-10-27T20:22:24.937Z","title":"Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","description":"Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","published":"2021-06-09T05:15:07.000Z","lastModified":"2026-06-17T02:49:24.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-787"],"affected":["qualcomm/aqt1000 firmware","qualcomm/pm3003a firmware","qualcomm/pm4125 firmware","qualcomm/pm456 firmware","qualcomm/pm6125 firmware","qualcomm/pm6150 firmware","qualcomm/pm6150a firmware","qualcomm/pm6150l firmware","qualcomm/pm6250 firmware","qualcomm/pm6350 firmware","qualcomm/pm640a firmware","qualcomm/pm640l firmware","qualcomm/pm640p firmware","qualcomm/pm660 firmware","qualcomm/pm660l firmware","qualcomm/pm670 firmware","qualcomm/pm670a firmware","qualcomm/pm670l firmware","qualcomm/pm7150a firmware","qualcomm/pm7150l firmware","qualcomm/pm7250 firmware","qualcomm/pm7250b firmware","qualcomm/pm8004 firmware","qualcomm/pm8005 firmware","qualcomm/pm8008 firmware","qualcomm/pm8009 firmware","qualcomm/pm8150 firmware","qualcomm/pm8150a firmware","qualcomm/pm8150b firmware","qualcomm/pm8150c firmware","qualcomm/pm8150l firmware","qualcomm/pm8250 firmware","qualcomm/pm845 firmware","qualcomm/pm855 firmware","qualcomm/pm855a firmware","qualcomm/pm855b firmware","qualcomm/pm855l firmware","qualcomm/pm855p firmware","qualcomm/pm8998 firmware","qualcomm/pmc1000h firmware","qualcomm/pmc7180 firmware","qualcomm/pme605 firmware","qualcomm/pmi632 firmware","qualcomm/pmi8998 firmware","qualcomm/pmk8002 firmware","qualcomm/pmk8003 firmware","qualcomm/pmm6155au firmware","qualcomm/pmm8155au firmware","qualcomm/pmm8195au firmware","qualcomm/pmm855au firmware","qualcomm/pmr525 firmware","qualcomm/pmr735a firmware","qualcomm/pmr735b firmware","qualcomm/pmx50 firmware","qualcomm/pmx55 firmware","qualcomm/qat3516 firmware","qualcomm/qat3518 firmware","qualcomm/qat3519 firmware","qualcomm/qat3522 firmware","qualcomm/qat3550 firmware"],"epss":{"score":0.00808,"percentile":0.56591,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.81%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11182","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}