CVE-2020-11184
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
CVE-2020-11184- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
CVE-2020-11184- Updated
- 2026-11-02
EUVDEUVD-2020-3538 No score
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
EUVD-2020-3538- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-267g-v863-wg5w No score
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
- Record
GHSA-267g-v863-wg5w- Weakness
- CWE-190
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile
- qualcomm qcm4290 firmware
- qualcomm qcs4290 firmware
- qualcomm qm215 firmware
- qualcomm qsm8350 firmware
- qualcomm sa6145p firmware
- qualcomm sa6155 firmware
- qualcomm sa6155p firmware
- qualcomm sa8155 firmware
- qualcomm sa8155p firmware
- qualcomm sdx55 firmware
- qualcomm sdx55m firmware
Show 18 moreShow less
- qualcomm sm4250 firmware
- qualcomm sm4250p firmware
- qualcomm sm6115 firmware
- qualcomm sm6115p firmware
- qualcomm sm6125 firmware
- qualcomm sm6250 firmware
- qualcomm sm6350 firmware
- qualcomm sm7125 firmware
- qualcomm sm7225 firmware
- qualcomm sm7250 firmware
- qualcomm sm7250p firmware
- qualcomm sm8150 firmware
- qualcomm sm8150p firmware
- qualcomm sm8250 firmware
- qualcomm sm8350 firmware
- qualcomm sm8350p firmware
- qualcomm sxr2130 firmware
- qualcomm sxr2130p firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11184 is a critical vulnerability (CVSS 9.8) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile, published November 12, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. No source names a fixed version.