CVE-2020-11149
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in...
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
CVE-2020-11149- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
CVE-2020-11149- Updated
- 2026-11-02
EUVDEUVD-2020-3503 No score
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
EUVD-2020-3503- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mpxx-6gg7-w2hx No score
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in...
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
- Record
GHSA-mpxx-6gg7-w2hx- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables
- qualcomm apq8053
- qualcomm apq8096au
- qualcomm aqt1000
- qualcomm ar8031
- qualcomm ar8035
- qualcomm csra6620
- qualcomm csra6640
- qualcomm mdm9650
- qualcomm pm215
- qualcomm pm3003a
- qualcomm pm6125
Show 282 moreShow less
- qualcomm pm6150
- qualcomm pm6150a
- qualcomm pm6150l
- qualcomm pm6350
- qualcomm pm640a
- qualcomm pm640l
- qualcomm pm640p
- qualcomm pm660
- qualcomm pm660l
- qualcomm pm670
- qualcomm pm670a
- qualcomm pm670l
- qualcomm pm7150a
- qualcomm pm7150l
- qualcomm pm7250
- qualcomm pm7250b
- qualcomm pm7350c
- qualcomm pm8004
- qualcomm pm8005
- qualcomm pm8008
- qualcomm pm8009
- qualcomm pm8150
- qualcomm pm8150a
- qualcomm pm8150b
- qualcomm pm8150c
- qualcomm pm8150l
- qualcomm pm8250
- qualcomm pm8350
- qualcomm pm8350b
- qualcomm pm8350bh
- qualcomm pm8350bhs
- qualcomm pm8350c
- qualcomm pm855
- qualcomm pm855a
- qualcomm pm855b
- qualcomm pm855l
- qualcomm pm855p
- qualcomm pm8909
- qualcomm pm8916
- qualcomm pm8953
- qualcomm pm8998
- qualcomm pmc1000h
- qualcomm pmd9655
- qualcomm pme605
- qualcomm pmi632
- qualcomm pmi8952
- qualcomm pmi8998
- qualcomm pmk7350
- qualcomm pmk8002
- qualcomm pmk8003
- qualcomm pmk8350
- qualcomm pmm6155au
- qualcomm pmm8155au
- qualcomm pmm855au
- qualcomm pmm8996au
- qualcomm pmr525
- qualcomm pmr735a
- qualcomm pmr735b
- qualcomm pmw3100
- qualcomm pmx20
- qualcomm pmx24
- qualcomm pmx55
- qualcomm qat3514
- qualcomm qat3516
- qualcomm qat3518
- qualcomm qat3519
- qualcomm qat3522
- qualcomm qat3550
- qualcomm qat3555
- qualcomm qat5515
- qualcomm qat5516
- qualcomm qat5522
- qualcomm qat5533
- qualcomm qat5568
- qualcomm qbt1500
- qualcomm qbt2000
- qualcomm qca4020
- qualcomm qca6174a
- qualcomm qca6390
- qualcomm qca6391
- qualcomm qca6420
- qualcomm qca6421
- qualcomm qca6426
- qualcomm qca6430
- qualcomm qca6431
- qualcomm qca6436
- qualcomm qca6564
- qualcomm qca6564a
- qualcomm qca6564au
- qualcomm qca6574
- qualcomm qca6574a
- qualcomm qca6574au
- qualcomm qca6584au
- qualcomm qca6595au
- qualcomm qca6696
- qualcomm qca8337
- qualcomm qca9377
- qualcomm qca9379
- qualcomm qcm4290
- qualcomm qcs405
- qualcomm qcs4290
- qualcomm qcs603
- qualcomm qcs605
- qualcomm qdm2301
- qualcomm qdm2302
- qualcomm qdm2305
- qualcomm qdm2307
- qualcomm qdm2308
- qualcomm qdm2310
- qualcomm qdm3301
- qualcomm qdm3302
- qualcomm qdm4643
- qualcomm qdm4650
- qualcomm qdm5579
- qualcomm qdm5620
- qualcomm qdm5621
- qualcomm qdm5650
- qualcomm qdm5652
- qualcomm qdm5670
- qualcomm qdm5671
- qualcomm qdm5677
- qualcomm qdm5679
- qualcomm qet4100
- qualcomm qet4101
- qualcomm qet5100
- qualcomm qet5100m
- qualcomm qet6100
- qualcomm qet6110
- qualcomm qfs2530
- qualcomm qfs2580
- qualcomm qfs2608
- qualcomm qfs2630
- qualcomm qln1030
- qualcomm qln4642
- qualcomm qln4650
- qualcomm qln5020
- qualcomm qln5030
- qualcomm qln5040
- qualcomm qpa2625
- qualcomm qpa4360
- qualcomm qpa4361
- qualcomm qpa5460
- qualcomm qpa5461
- qualcomm qpa5580
- qualcomm qpa5581
- qualcomm qpa6560
- qualcomm qpa8673
- qualcomm qpa8686
- qualcomm qpa8801
- qualcomm qpa8802
- qualcomm qpa8803
- qualcomm qpa8821
- qualcomm qpa8842
- qualcomm qpm4621
- qualcomm qpm4630
- qualcomm qpm4640
- qualcomm qpm4641
- qualcomm qpm4650
- qualcomm qpm5541
- qualcomm qpm5577
- qualcomm qpm5579
- qualcomm qpm5621
- qualcomm qpm5641
- qualcomm qpm5658
- qualcomm qpm5670
- qualcomm qpm5677
- qualcomm qpm5679
- qualcomm qpm5870
- qualcomm qpm5875
- qualcomm qpm6325
- qualcomm qpm6375
- qualcomm qpm6582
- qualcomm qpm6585
- qualcomm qpm6621
- qualcomm qpm6670
- qualcomm qpm8820
- qualcomm qpm8830
- qualcomm qpm8870
- qualcomm qpm8895
- qualcomm qsm7250
- qualcomm qsw6310
- qualcomm qsw8573
- qualcomm qsw8574
- qualcomm qtc410s
- qualcomm qtc800h
- qualcomm qtc800s
- qualcomm qtc801s
- qualcomm qtm525
- qualcomm qtm527
- qualcomm qualcomm215
- qualcomm sa6145p
- qualcomm sa6155p
- qualcomm sa8155
- qualcomm sa8155p
- qualcomm sd205
- qualcomm sd210
- qualcomm sd429
- qualcomm sd460
- qualcomm sd662
- qualcomm sd665
- qualcomm sd675
- qualcomm sd6905g
- qualcomm sd750g
- qualcomm sd765
- qualcomm sd765g
- qualcomm sd768g
- qualcomm sd855
- qualcomm sd8655g
- qualcomm sd8885g
- qualcomm sd8c
- qualcomm sd8cx
- qualcomm sda429w
- qualcomm sdm429w
- qualcomm sdm830
- qualcomm sdr425
- qualcomm sdr660
- qualcomm sdr660g
- qualcomm sdr735
- qualcomm sdr735g
- qualcomm sdr8150
- qualcomm sdr8250
- qualcomm sdr865
- qualcomm sdx20
- qualcomm sdx20m
- qualcomm sdx24
- qualcomm sdx55
- qualcomm sdx55m
- qualcomm sdxr1
- qualcomm sdxr25g
- qualcomm sm7250p
- qualcomm sm7350
- qualcomm smb1350
- qualcomm smb1351
- qualcomm smb1354
- qualcomm smb1355
- qualcomm smb1357
- qualcomm smb1381
- qualcomm smb1390
- qualcomm smb1394
- qualcomm smb1395
- qualcomm smb1396
- qualcomm smb1398
- qualcomm smb2351
- qualcomm smr525
- qualcomm smr526
- qualcomm smr545
- qualcomm smr546
- qualcomm wcd9326
- qualcomm wcd9335
- qualcomm wcd9340
- qualcomm wcd9341
- qualcomm wcd9370
- qualcomm wcd9375
- qualcomm wcd9380
- qualcomm wcd9385
- qualcomm wcn3610
- qualcomm wcn3615
- qualcomm wcn3620
- qualcomm wcn3660b
- qualcomm wcn3680
- qualcomm wcn3680b
- qualcomm wcn3950
- qualcomm wcn3980
- qualcomm wcn3988
- qualcomm wcn3990
- qualcomm wcn3991
- qualcomm wcn3998
- qualcomm wcn3999
- qualcomm wcn6740
- qualcomm wcn6750
- qualcomm wcn6850
- qualcomm wcn6851
- qualcomm wcn6856
- qualcomm wgr7640
- qualcomm wsa8810
- qualcomm wsa8815
- qualcomm wsa8830
- qualcomm wsa8835
- qualcomm wtr2965
- qualcomm wtr3925
- qualcomm wtr4905
- qualcomm wtr5975
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11149 is a medium vulnerability (CVSS 6.7) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, published January 21, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.