ZeroDay Findings
Sign inSign up

Findings

CVE-2020-11261

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Published Jun 8, 2021 · updated Jun 16, 2026 · qualcomm apq8009 firmware

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Timeline

Detection, updates, and resolution for this record.

  1. Jun 8, 2021 · Catalog

    Detected

    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  2. Dec 1, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 1, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Required action

Apply updates per vendor instructions.

CISA due date Jun 1, 2022

Affected

  • cpe qualcomm/apq8009 firmwareversion unspecified
  • cpe qualcomm/apq8009w firmwareversion unspecified
  • cpe qualcomm/apq8017 firmwareversion unspecified
  • cpe qualcomm/apq8037 firmwareversion unspecified
  • cpe qualcomm/apq8053 firmwareversion unspecified
  • cpe qualcomm/apq8064au firmwareversion unspecified
  • cpe qualcomm/apq8096au firmwareversion unspecified
  • cpe qualcomm/aqt1000 firmwareversion unspecified
  • cpe qualcomm/ar8031 firmwareversion unspecified
  • cpe qualcomm/ar8035 firmwareversion unspecified
  • cpe qualcomm/ar8151 firmwareversion unspecified
  • cpe qualcomm/csra6620 firmwareversion unspecified
  • vendor Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wversion unspecified

Sources

  • CISA KEVCVE-2020-11261

    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

    cisa.gov
  • CVE.orgCVE-2020-11261

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-11261

    30-day exploitation probability 1.6%

    first.org
  • NIST NVDCVE-2020-11261

    Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

    nvd.nist.gov

References