CVE-2020-11261

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2020-11261

Remediation deadline: June 1, 2022

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Timeline

Published:December 1st, 2021 12:00 AM

Last modified:December 1st, 2021 12:00 AM

Added to KEV:December 1st, 2021

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Qualcomm

Products

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Weaknesses (CWE)

CWE-20

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute