CVE-2020-11261Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

PUBLISHEDvulnerability record
2021-12-01 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2020-11261
Project:
Qualcomm
Product:
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Date Added:
2021-12-01
Due Date:
2022-06-01
Last Updated:
June 21, 2025

Vulnerability Name

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Description

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

Related Weaknesses