CVE-2020-11254
Memory corruption during buffer allocation due to dereferencing session ctx pointer without...
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- Record
CVE-2020-11254- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2020-3608
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- Record
EUVD-2020-3608- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-938v-qrv3-mj9q No score
Memory corruption during buffer allocation due to dereferencing session ctx pointer without...
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- Record
GHSA-938v-qrv3-mj9q- Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
- Record
CVE-2020-11254- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile
- qualcomm pm6150a
- qualcomm pm6150l
- qualcomm pm6350
- qualcomm pm660
- qualcomm pm660l
- qualcomm pm7250b
- qualcomm pm8008
- qualcomm pm8009
- qualcomm pm8350
- qualcomm pm8350b
- qualcomm pm8350bh
Show 110 moreShow less
- qualcomm pm8350c
- qualcomm pmk8003
- qualcomm pmk8350
- qualcomm pmm6155au
- qualcomm pmm8155au
- qualcomm pmm8195au
- qualcomm pmr735a
- qualcomm pmr735b
- qualcomm qat3516
- qualcomm qat3518
- qualcomm qat3519
- qualcomm qat3555
- qualcomm qat5515
- qualcomm qat5516
- qualcomm qat5522
- qualcomm qat5568
- qualcomm qbt1500
- qualcomm qca6574au
- qualcomm qca6696
- qualcomm qdm3301
- qualcomm qdm4643
- qualcomm qdm4650
- qualcomm qdm5620
- qualcomm qdm5621
- qualcomm qdm5670
- qualcomm qdm5671
- qualcomm qet5100
- qualcomm qet5100m
- qualcomm qet6100
- qualcomm qet6105
- qualcomm qet6110
- qualcomm qfs2530
- qualcomm qfs2580
- qualcomm qfs2608
- qualcomm qfs2630
- qualcomm qln4642
- qualcomm qln4650
- qualcomm qln5020
- qualcomm qln5030
- qualcomm qln5040
- qualcomm qpa2625
- qualcomm qpa5461
- qualcomm qpa5580
- qualcomm qpa5581
- qualcomm qpa8801
- qualcomm qpa8802
- qualcomm qpa8803
- qualcomm qpa8821
- qualcomm qpa8842
- qualcomm qpm4621
- qualcomm qpm4630
- qualcomm qpm4640
- qualcomm qpm4641
- qualcomm qpm4650
- qualcomm qpm5621
- qualcomm qpm5641
- qualcomm qpm5670
- qualcomm qpm5677
- qualcomm qpm5679
- qualcomm qpm5870
- qualcomm qpm5875
- qualcomm qpm6585
- qualcomm qpm6621
- qualcomm qpm6670
- qualcomm qpm8820
- qualcomm qpm8870
- qualcomm qtc800h
- qualcomm qtc800s
- qualcomm qtc801s
- qualcomm qtm525
- qualcomm sa6145p
- qualcomm sa6150p
- qualcomm sa6155p
- qualcomm sa8150p
- qualcomm sa8155p
- qualcomm sa8195p
- qualcomm sd480
- qualcomm sd670
- qualcomm sd710
- qualcomm sd888
- qualcomm sd888 5g
- qualcomm sdr660
- qualcomm sdr660g
- qualcomm sdr735
- qualcomm sdr735g
- qualcomm sdr865
- qualcomm sdxr1
- qualcomm smb1351
- qualcomm smb1355
- qualcomm smb1396
- qualcomm smb1398
- qualcomm smr526
- qualcomm smr545
- qualcomm smr546
- qualcomm wcd9326
- qualcomm wcd9341
- qualcomm wcd9370
- qualcomm wcd9375
- qualcomm wcd9380
- qualcomm wcd9385
- qualcomm wcn3980
- qualcomm wcn3988
- qualcomm wcn3990
- qualcomm wcn3991
- qualcomm wcn6850
- qualcomm wcn6851
- qualcomm wcn6855
- qualcomm wcn6856
- qualcomm wsa8830
- qualcomm wsa8835
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
SoCVersion:0 up to SoCVersion:2021-05-05, plus listed versions SoCVersion |
SoCVersion:2021-05-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-11254 is a medium vulnerability (CVSS 6.2) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, published May 1, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in :unknown: SoCVersion:2021-05-05.