CVE-2020-11122
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary...
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
- Record
CVE-2020-11122- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
- Record
CVE-2020-11122- Updated
- 2026-11-02
EUVDEUVD-2020-3476 No score
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
- Record
EUVD-2020-3476- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqwc-24f2-x3gv No score
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary...
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
- Record
GHSA-gqwc-24f2-x3gv- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile
- qualcomm apq8098 firmware
- qualcomm bitra firmware
- qualcomm kamorta firmware
- qualcomm sa6155p firmware
- qualcomm saipan firmware
- qualcomm sm6150 firmware
- qualcomm sm7150 firmware
- qualcomm sm8150 firmware
- qualcomm sm8250 firmware
- qualcomm sxr2130 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11122 is a medium vulnerability (CVSS 5.5) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile, published September 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.