CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-11184
Critical (9.8) in qualcomm. EPSS 1.0% chance of exploitation in the next 30 days.
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:qcm4290_firmware
- qualcomm:qcs4290_firmware
- qualcomm:qm215_firmware
- qualcomm:qsm8350_firmware
- qualcomm:sa6145p_firmware
- qualcomm:sa6155_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa8155_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sdx55_firmware
- qualcomm:sdx55m_firmware
- qualcomm:sm4250_firmware
- qualcomm:sm4250p_firmware
- qualcomm:sm6115_firmware
- qualcomm:sm6115p_firmware
- qualcomm:sm6125_firmware
- qualcomm:sm6250_firmware
- qualcomm:sm6350_firmware
- qualcomm:sm7125_firmware
- qualcomm:sm7225_firmware
- qualcomm:sm7250_firmware
- qualcomm:sm7250p_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8150p_firmware
- qualcomm:sm8250_firmware
- qualcomm:sm8350_firmware
- qualcomm:sm8350p_firmware
- qualcomm:sxr2130_firmware
- qualcomm:sxr2130p_firmware