{"id":"CVE-2020-11184","aliases":["EUVD-2020-3538","GHSA-267g-v863-wg5w"],"status":"published","title":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...","description":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00953,"percentile":0.61787,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2020-11-12T10:00:54Z","modified":"2026-06-17T02:49:24Z","products":[{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qm215_firmware"},{"vendor":"qualcomm","product":"qsm8350_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sm4250_firmware"},{"vendor":"qualcomm","product":"sm4250p_firmware"},{"vendor":"qualcomm","product":"sm6115_firmware"},{"vendor":"qualcomm","product":"sm6115p_firmware"},{"vendor":"qualcomm","product":"sm6125_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6350_firmware"},{"vendor":"qualcomm","product":"sm7125_firmware"},{"vendor":"qualcomm","product":"sm7225_firmware"},{"vendor":"qualcomm","product":"sm7250_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"sm8150_firmware"},{"vendor":"qualcomm","product":"sm8150p_firmware"},{"vendor":"qualcomm","product":"sm8250_firmware"},{"vendor":"qualcomm","product":"sm8350_firmware"},{"vendor":"qualcomm","product":"sm8350p_firmware"},{"vendor":"qualcomm","product":"sxr2130_firmware"},{"vendor":"qualcomm","product":"sxr2130p_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11184"},{"url":"https://github.com/advisories/GHSA-267g-v863-wg5w"}],"sources":{"cve":[{"id":"CVE-2020-11184","description":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","status":"published","published":"2020-11-12T10:00:54Z","modified":"2024-08-04T11:28:13.313Z","updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-3538","description":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","status":"published","published":"2020-11-12T10:00:54Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-267g-v863-wg5w","title":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...","description":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","status":"published","published":"2022-05-24T17:33:30Z","modified":"2023-01-29T05:04:41Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:45:36.996717Z"}],"nvd":[{"id":"CVE-2020-11184","description":"u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","status":"published","published":"2020-11-12T10:15:12.593Z","modified":"2026-06-17T02:49:24.39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}