CVE-2020-11261 — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

provenance: imported · CVE: CVE-2020-11261

CVE-2020-11261: Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Qualcomm
Product	Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Date added	2021-12-01
Due date	2022-06-01
Ransomware campaign use	Unknown

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-11261

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-11261
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog