CVE-2020-11130
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer...
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
CVE-2020-11130- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
CVE-2020-11130- Updated
- 2026-11-02
EUVDEUVD-2020-3484 No score
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
EUVD-2020-3484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-39qh-wg3w-6hpg No score
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer...
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
GHSA-39qh-wg3w-6hpg- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile
- qualcomm qcm4290 firmware
- qualcomm qcs4290 firmware
- qualcomm qm215 firmware
- qualcomm qsm8350 firmware
- qualcomm sa6145p firmware
- qualcomm sa6155 firmware
- qualcomm sa6155p firmware
- qualcomm sa8155 firmware
- qualcomm sa8155p firmware
- qualcomm sc8180x firmware
- qualcomm sc8180xp firmware
Show 20 moreShow less
- qualcomm sdx55 firmware
- qualcomm sdx55m firmware
- qualcomm sm4250 firmware
- qualcomm sm4250p firmware
- qualcomm sm6115 firmware
- qualcomm sm6115p firmware
- qualcomm sm6125 firmware
- qualcomm sm6250 firmware
- qualcomm sm6350 firmware
- qualcomm sm7125 firmware
- qualcomm sm7225 firmware
- qualcomm sm7250 firmware
- qualcomm sm7250p firmware
- qualcomm sm8150 firmware
- qualcomm sm8150p firmware
- qualcomm sm8250 firmware
- qualcomm sm8350 firmware
- qualcomm sm8350p firmware
- qualcomm sxr2130 firmware
- qualcomm sxr2130p firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11130 is a high vulnerability (CVSS 7.8) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile, published November 12, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.