{"id":"CVE-2020-11150","aliases":["EUVD-2020-3504","GHSA-3pxr-vgjw-q3f8"],"status":"published","title":"Out of bound memory access in camera driver due to improper validation on data coming from UMD...","description":"Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0021,"percentile":0.11284,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2021-01-21T09:41:17Z","modified":"2026-06-17T02:49:15Z","products":[{"vendor":"qualcomm","product":"aqt1000"},{"vendor":"qualcomm","product":"ar8031"},{"vendor":"qualcomm","product":"ar8035"},{"vendor":"qualcomm","product":"csra6620"},{"vendor":"qualcomm","product":"csra6640"},{"vendor":"qualcomm","product":"pm215"},{"vendor":"qualcomm","product":"pm3003a"},{"vendor":"qualcomm","product":"pm6125"},{"vendor":"qualcomm","product":"pm6150"},{"vendor":"qualcomm","product":"pm6150a"},{"vendor":"qualcomm","product":"pm6150l"},{"vendor":"qualcomm","product":"pm6350"},{"vendor":"qualcomm","product":"pm640a"},{"vendor":"qualcomm","product":"pm640l"},{"vendor":"qualcomm","product":"pm640p"},{"vendor":"qualcomm","product":"pm660"},{"vendor":"qualcomm","product":"pm660l"},{"vendor":"qualcomm","product":"pm670"},{"vendor":"qualcomm","product":"pm670a"},{"vendor":"qualcomm","product":"pm670l"},{"vendor":"qualcomm","product":"pm7150a"},{"vendor":"qualcomm","product":"pm7150l"},{"vendor":"qualcomm","product":"pm7250"},{"vendor":"qualcomm","product":"pm7250b"},{"vendor":"qualcomm","product":"pm7350c"},{"vendor":"qualcomm","product":"pm8005"},{"vendor":"qualcomm","product":"pm8008"},{"vendor":"qualcomm","product":"pm8009"},{"vendor":"qualcomm","product":"pm8150"},{"vendor":"qualcomm","product":"pm8150a"},{"vendor":"qualcomm","product":"pm8150b"},{"vendor":"qualcomm","product":"pm8150c"},{"vendor":"qualcomm","product":"pm8150l"},{"vendor":"qualcomm","product":"pm8250"},{"vendor":"qualcomm","product":"pm8350"},{"vendor":"qualcomm","product":"pm8350b"},{"vendor":"qualcomm","product":"pm8350bh"},{"vendor":"qualcomm","product":"pm8350bhs"},{"vendor":"qualcomm","product":"pm8350c"},{"vendor":"qualcomm","product":"pm855"},{"vendor":"qualcomm","product":"pm855b"},{"vendor":"qualcomm","product":"pm855l"},{"vendor":"qualcomm","product":"pm855p"},{"vendor":"qualcomm","product":"pm8909"},{"vendor":"qualcomm","product":"pm8916"},{"vendor":"qualcomm","product":"pmc1000h"},{"vendor":"qualcomm","product":"pmd9655"},{"vendor":"qualcomm","product":"pme605"},{"vendor":"qualcomm","product":"pmi632"},{"vendor":"qualcomm","product":"pmk7350"},{"vendor":"qualcomm","product":"pmk8002"},{"vendor":"qualcomm","product":"pmk8003"},{"vendor":"qualcomm","product":"pmk8350"},{"vendor":"qualcomm","product":"pmm6155au"},{"vendor":"qualcomm","product":"pmm8155au"},{"vendor":"qualcomm","product":"pmm8195au"},{"vendor":"qualcomm","product":"pmm855au"},{"vendor":"qualcomm","product":"pmr525"},{"vendor":"qualcomm","product":"pmr735a"},{"vendor":"qualcomm","product":"pmr735b"},{"vendor":"qualcomm","product":"pmx24"},{"vendor":"qualcomm","product":"pmx55"},{"vendor":"qualcomm","product":"qat3514"},{"vendor":"qualcomm","product":"qat3516"},{"vendor":"qualcomm","product":"qat3518"},{"vendor":"qualcomm","product":"qat3519"},{"vendor":"qualcomm","product":"qat3522"},{"vendor":"qualcomm","product":"qat3550"},{"vendor":"qualcomm","product":"qat3555"},{"vendor":"qualcomm","product":"qat5515"},{"vendor":"qualcomm","product":"qat5516"},{"vendor":"qualcomm","product":"qat5522"},{"vendor":"qualcomm","product":"qat5533"},{"vendor":"qualcomm","product":"qat5568"},{"vendor":"qualcomm","product":"qbt1500"},{"vendor":"qualcomm","product":"qbt2000"},{"vendor":"qualcomm","product":"qca4020"},{"vendor":"qualcomm","product":"qca6174a"},{"vendor":"qualcomm","product":"qca6175a"},{"vendor":"qualcomm","product":"qca6390"},{"vendor":"qualcomm","product":"qca6391"},{"vendor":"qualcomm","product":"qca6420"},{"vendor":"qualcomm","product":"qca6421"},{"vendor":"qualcomm","product":"qca6426"},{"vendor":"qualcomm","product":"qca6430"},{"vendor":"qualcomm","product":"qca6431"},{"vendor":"qualcomm","product":"qca6436"},{"vendor":"qualcomm","product":"qca6564"},{"vendor":"qualcomm","product":"qca6564a"},{"vendor":"qualcomm","product":"qca6564au"},{"vendor":"qualcomm","product":"qca6574"},{"vendor":"qualcomm","product":"qca6574a"},{"vendor":"qualcomm","product":"qca6574au"},{"vendor":"qualcomm","product":"qca6584au"},{"vendor":"qualcomm","product":"qca6595"},{"vendor":"qualcomm","product":"qca6595au"},{"vendor":"qualcomm","product":"qca6696"},{"vendor":"qualcomm","product":"qca8337"},{"vendor":"qualcomm","product":"qca9377"},{"vendor":"qualcomm","product":"qca9379"},{"vendor":"qualcomm","product":"qcm4290"},{"vendor":"qualcomm","product":"qcs405"},{"vendor":"qualcomm","product":"qcs4290"},{"vendor":"qualcomm","product":"qcs603"},{"vendor":"qualcomm","product":"qcs605"},{"vendor":"qualcomm","product":"qdm2301"},{"vendor":"qualcomm","product":"qdm2302"},{"vendor":"qualcomm","product":"qdm2305"},{"vendor":"qualcomm","product":"qdm2307"},{"vendor":"qualcomm","product":"qdm2308"},{"vendor":"qualcomm","product":"qdm2310"},{"vendor":"qualcomm","product":"qdm3301"},{"vendor":"qualcomm","product":"qdm3302"},{"vendor":"qualcomm","product":"qdm4643"},{"vendor":"qualcomm","product":"qdm4650"},{"vendor":"qualcomm","product":"qdm5579"},{"vendor":"qualcomm","product":"qdm5620"},{"vendor":"qualcomm","product":"qdm5621"},{"vendor":"qualcomm","product":"qdm5650"},{"vendor":"qualcomm","product":"qdm5652"},{"vendor":"qualcomm","product":"qdm5670"},{"vendor":"qualcomm","product":"qdm5671"},{"vendor":"qualcomm","product":"qdm5677"},{"vendor":"qualcomm","product":"qdm5679"},{"vendor":"qualcomm","product":"qet4101"},{"vendor":"qualcomm","product":"qet4200aq"},{"vendor":"qualcomm","product":"qet5100"},{"vendor":"qualcomm","product":"qet5100m"},{"vendor":"qualcomm","product":"qet6100"},{"vendor":"qualcomm","product":"qet6110"},{"vendor":"qualcomm","product":"qfs2530"},{"vendor":"qualcomm","product":"qfs2580"},{"vendor":"qualcomm","product":"qfs2608"},{"vendor":"qualcomm","product":"qfs2630"},{"vendor":"qualcomm","product":"qln1021aq"},{"vendor":"qualcomm","product":"qln1031"},{"vendor":"qualcomm","product":"qln1036aq"},{"vendor":"qualcomm","product":"qln4642"},{"vendor":"qualcomm","product":"qln4650"},{"vendor":"qualcomm","product":"qln5020"},{"vendor":"qualcomm","product":"qln5030"},{"vendor":"qualcomm","product":"qln5040"},{"vendor":"qualcomm","product":"qpa2625"},{"vendor":"qualcomm","product":"qpa4360"},{"vendor":"qualcomm","product":"qpa4361"},{"vendor":"qualcomm","product":"qpa5461"},{"vendor":"qualcomm","product":"qpa5580"},{"vendor":"qualcomm","product":"qpa5581"},{"vendor":"qualcomm","product":"qpa6560"},{"vendor":"qualcomm","product":"qpa8673"},{"vendor":"qualcomm","product":"qpa8686"},{"vendor":"qualcomm","product":"qpa8801"},{"vendor":"qualcomm","product":"qpa8802"},{"vendor":"qualcomm","product":"qpa8803"},{"vendor":"qualcomm","product":"qpa8821"},{"vendor":"qualcomm","product":"qpa8842"},{"vendor":"qualcomm","product":"qpm4621"},{"vendor":"qualcomm","product":"qpm4630"},{"vendor":"qualcomm","product":"qpm4640"},{"vendor":"qualcomm","product":"qpm4641"},{"vendor":"qualcomm","product":"qpm4650"},{"vendor":"qualcomm","product":"qpm5541"},{"vendor":"qualcomm","product":"qpm5577"},{"vendor":"qualcomm","product":"qpm5579"},{"vendor":"qualcomm","product":"qpm5621"},{"vendor":"qualcomm","product":"qpm5641"},{"vendor":"qualcomm","product":"qpm5658"},{"vendor":"qualcomm","product":"qpm5670"},{"vendor":"qualcomm","product":"qpm5677"},{"vendor":"qualcomm","product":"qpm5679"},{"vendor":"qualcomm","product":"qpm5870"},{"vendor":"qualcomm","product":"qpm5875"},{"vendor":"qualcomm","product":"qpm6325"},{"vendor":"qualcomm","product":"qpm6375"},{"vendor":"qualcomm","product":"qpm6582"},{"vendor":"qualcomm","product":"qpm6585"},{"vendor":"qualcomm","product":"qpm6621"},{"vendor":"qualcomm","product":"qpm6670"},{"vendor":"qualcomm","product":"qpm8820"},{"vendor":"qualcomm","product":"qpm8830"},{"vendor":"qualcomm","product":"qpm8870"},{"vendor":"qualcomm","product":"qpm8895"},{"vendor":"qualcomm","product":"qsm7250"},{"vendor":"qualcomm","product":"qsw6310"},{"vendor":"qualcomm","product":"qsw8573"},{"vendor":"qualcomm","product":"qsw8574"},{"vendor":"qualcomm","product":"qtc410s"},{"vendor":"qualcomm","product":"qtc800h"},{"vendor":"qualcomm","product":"qtc801s"},{"vendor":"qualcomm","product":"qtm525"},{"vendor":"qualcomm","product":"qtm527"},{"vendor":"qualcomm","product":"qualcomm215"},{"vendor":"qualcomm","product":"sa6145p"},{"vendor":"qualcomm","product":"sa6155"},{"vendor":"qualcomm","product":"sa6155p"},{"vendor":"qualcomm","product":"sa8150p"},{"vendor":"qualcomm","product":"sa8155"},{"vendor":"qualcomm","product":"sa8155p"},{"vendor":"qualcomm","product":"sa8195p"},{"vendor":"qualcomm","product":"sd205"},{"vendor":"qualcomm","product":"sd210"},{"vendor":"qualcomm","product":"sd460"},{"vendor":"qualcomm","product":"sd662"},{"vendor":"qualcomm","product":"sd665"},{"vendor":"qualcomm","product":"sd675"},{"vendor":"qualcomm","product":"sd6905g"},{"vendor":"qualcomm","product":"sd750g"},{"vendor":"qualcomm","product":"sd765"},{"vendor":"qualcomm","product":"sd765g"},{"vendor":"qualcomm","product":"sd768g"},{"vendor":"qualcomm","product":"sd855"},{"vendor":"qualcomm","product":"sd8655g"},{"vendor":"qualcomm","product":"sd8885g"},{"vendor":"qualcomm","product":"sd8c"},{"vendor":"qualcomm","product":"sd8cx"},{"vendor":"qualcomm","product":"sda429w"},{"vendor":"qualcomm","product":"sdm429w"},{"vendor":"qualcomm","product":"sdr425"},{"vendor":"qualcomm","product":"sdr660"},{"vendor":"qualcomm","product":"sdr660g"},{"vendor":"qualcomm","product":"sdr735"},{"vendor":"qualcomm","product":"sdr735g"},{"vendor":"qualcomm","product":"sdr8150"},{"vendor":"qualcomm","product":"sdr8250"},{"vendor":"qualcomm","product":"sdr865"},{"vendor":"qualcomm","product":"sdx24"},{"vendor":"qualcomm","product":"sdx55"},{"vendor":"qualcomm","product":"sdx55m"},{"vendor":"qualcomm","product":"sdxr1"},{"vendor":"qualcomm","product":"sdxr25g"},{"vendor":"qualcomm","product":"sm7250p"},{"vendor":"qualcomm","product":"sm7350"},{"vendor":"qualcomm","product":"smb1351"},{"vendor":"qualcomm","product":"smb1354"},{"vendor":"qualcomm","product":"smb1355"},{"vendor":"qualcomm","product":"smb1381"},{"vendor":"qualcomm","product":"smb1390"},{"vendor":"qualcomm","product":"smb1394"},{"vendor":"qualcomm","product":"smb1395"},{"vendor":"qualcomm","product":"smb1396"},{"vendor":"qualcomm","product":"smb1398"},{"vendor":"qualcomm","product":"smb2351"},{"vendor":"qualcomm","product":"smr525"},{"vendor":"qualcomm","product":"smr526"},{"vendor":"qualcomm","product":"smr545"},{"vendor":"qualcomm","product":"smr546"},{"vendor":"qualcomm","product":"wcd9326"},{"vendor":"qualcomm","product":"wcd9335"},{"vendor":"qualcomm","product":"wcd9340"},{"vendor":"qualcomm","product":"wcd9341"},{"vendor":"qualcomm","product":"wcd9370"},{"vendor":"qualcomm","product":"wcd9375"},{"vendor":"qualcomm","product":"wcd9380"},{"vendor":"qualcomm","product":"wcd9385"},{"vendor":"qualcomm","product":"wcn3610"},{"vendor":"qualcomm","product":"wcn3615"},{"vendor":"qualcomm","product":"wcn3620"},{"vendor":"qualcomm","product":"wcn3660b"},{"vendor":"qualcomm","product":"wcn3680"},{"vendor":"qualcomm","product":"wcn3680b"},{"vendor":"qualcomm","product":"wcn3950"},{"vendor":"qualcomm","product":"wcn3980"},{"vendor":"qualcomm","product":"wcn3988"},{"vendor":"qualcomm","product":"wcn3990"},{"vendor":"qualcomm","product":"wcn3991"},{"vendor":"qualcomm","product":"wcn3998"},{"vendor":"qualcomm","product":"wcn3999"},{"vendor":"qualcomm","product":"wcn6740"},{"vendor":"qualcomm","product":"wcn6750"},{"vendor":"qualcomm","product":"wcn6850"},{"vendor":"qualcomm","product":"wcn6851"},{"vendor":"qualcomm","product":"wcn6856"},{"vendor":"qualcomm","product":"wgr7640"},{"vendor":"qualcomm","product":"wsa8810"},{"vendor":"qualcomm","product":"wsa8815"},{"vendor":"qualcomm","product":"wsa8830"},{"vendor":"qualcomm","product":"wsa8835"},{"vendor":"qualcomm","product":"wtr2965"},{"vendor":"qualcomm","product":"wtr3925"},{"vendor":"qualcomm","product":"wtr4905"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11150"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-3pxr-vgjw-q3f8"}],"sources":{"cve":[{"id":"CVE-2020-11150","description":"Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-01-21T09:41:17Z","modified":"2024-08-04T11:28:12.542Z","updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-3504","description":"Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-01-21T09:41:17Z","modified":"2024-08-04T11:28:12Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-3pxr-vgjw-q3f8","title":"Out of bound memory access in camera driver due to improper validation on data coming from UMD...","description":"Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-05-24T17:39:59Z","modified":"2023-01-29T05:05:29Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:48.396935Z"}],"nvd":[{"id":"CVE-2020-11150","description":"Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-01-21T10:15:13.807Z","modified":"2026-06-17T02:49:15.81Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:06:30.596418Z"}]}}