{"id":"CVE-2020-11223","aliases":["2721399","A-172349026","ASB-A-172349026","EUVD-2020-3577","GHSA-vq29-7qhf-v4wv"],"status":"published","title":"Out of bound in camera driver due to lack of check of validation of array index before copying...","description":"Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00167,"percentile":0.06019,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2021-02-22T06:25:56Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2021-03-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-03-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"pm3003a_firmware"},{"vendor":"qualcomm","product":"pm456_firmware"},{"vendor":"qualcomm","product":"pm6150_firmware"},{"vendor":"qualcomm","product":"pm6150a_firmware"},{"vendor":"qualcomm","product":"pm6150l_firmware"},{"vendor":"qualcomm","product":"pm6250_firmware"},{"vendor":"qualcomm","product":"pm6350_firmware"},{"vendor":"qualcomm","product":"pm660_firmware"},{"vendor":"qualcomm","product":"pm660a_firmware"},{"vendor":"qualcomm","product":"pm660l_firmware"},{"vendor":"qualcomm","product":"pm7150a_firmware"},{"vendor":"qualcomm","product":"pm7150l_firmware"},{"vendor":"qualcomm","product":"pm7250_firmware"},{"vendor":"qualcomm","product":"pm7250b_firmware"},{"vendor":"qualcomm","product":"pm7350c_firmware"},{"vendor":"qualcomm","product":"pm8004_firmware"},{"vendor":"qualcomm","product":"pm8008_firmware"},{"vendor":"qualcomm","product":"pm8009_firmware"},{"vendor":"qualcomm","product":"pm8150a_firmware"},{"vendor":"qualcomm","product":"pm8150b_firmware"},{"vendor":"qualcomm","product":"pm8150c_firmware"},{"vendor":"qualcomm","product":"pm8150l_firmware"},{"vendor":"qualcomm","product":"pm8250_firmware"},{"vendor":"qualcomm","product":"pm8350_firmware"},{"vendor":"qualcomm","product":"pm8350b_firmware"},{"vendor":"qualcomm","product":"pm8350bh_firmware"},{"vendor":"qualcomm","product":"pm8350bhs_firmware"},{"vendor":"qualcomm","product":"pm8350c_firmware"},{"vendor":"qualcomm","product":"pm855_firmware"},{"vendor":"qualcomm","product":"pm855b_firmware"},{"vendor":"qualcomm","product":"pm855l_firmware"},{"vendor":"qualcomm","product":"pm855p_firmware"},{"vendor":"qualcomm","product":"pmi632_firmware"},{"vendor":"qualcomm","product":"pmk7350_firmware"},{"vendor":"qualcomm","product":"pmk8002_firmware"},{"vendor":"qualcomm","product":"pmk8003_firmware"},{"vendor":"qualcomm","product":"pmk8350_firmware"},{"vendor":"qualcomm","product":"pmr735a_firmware"},{"vendor":"qualcomm","product":"pmr735b_firmware"},{"vendor":"qualcomm","product":"pmx50_firmware"},{"vendor":"qualcomm","product":"pmx55_firmware"},{"vendor":"qualcomm","product":"qat3514_firmware"},{"vendor":"qualcomm","product":"qat3516_firmware"},{"vendor":"qualcomm","product":"qat3518_firmware"},{"vendor":"qualcomm","product":"qat3519_firmware"},{"vendor":"qualcomm","product":"qat3522_firmware"},{"vendor":"qualcomm","product":"qat3550_firmware"},{"vendor":"qualcomm","product":"qat3555_firmware"},{"vendor":"qualcomm","product":"qat5515_firmware"},{"vendor":"qualcomm","product":"qat5516_firmware"},{"vendor":"qualcomm","product":"qat5522_firmware"},{"vendor":"qualcomm","product":"qat5533_firmware"},{"vendor":"qualcomm","product":"qat5568_firmware"},{"vendor":"qualcomm","product":"qbt1500_firmware"},{"vendor":"qualcomm","product":"qbt2000_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qdm2301_firmware"},{"vendor":"qualcomm","product":"qdm2305_firmware"},{"vendor":"qualcomm","product":"qdm2307_firmware"},{"vendor":"qualcomm","product":"qdm2308_firmware"},{"vendor":"qualcomm","product":"qdm2310_firmware"},{"vendor":"qualcomm","product":"qdm3301_firmware"},{"vendor":"qualcomm","product":"qdm3302_firmware"},{"vendor":"qualcomm","product":"qdm4643_firmware"},{"vendor":"qualcomm","product":"qdm4650_firmware"},{"vendor":"qualcomm","product":"qdm5579_firmware"},{"vendor":"qualcomm","product":"qdm5620_firmware"},{"vendor":"qualcomm","product":"qdm5621_firmware"},{"vendor":"qualcomm","product":"qdm5650_firmware"},{"vendor":"qualcomm","product":"qdm5652_firmware"},{"vendor":"qualcomm","product":"qdm5670_firmware"},{"vendor":"qualcomm","product":"qdm5671_firmware"},{"vendor":"qualcomm","product":"qdm5677_firmware"},{"vendor":"qualcomm","product":"qdm5679_firmware"},{"vendor":"qualcomm","product":"qet4100_firmware"},{"vendor":"qualcomm","product":"qet4101_firmware"},{"vendor":"qualcomm","product":"qet5100_firmware"},{"vendor":"qualcomm","product":"qet5100m_firmware"},{"vendor":"qualcomm","product":"qet6100_firmware"},{"vendor":"qualcomm","product":"qet6110_firmware"},{"vendor":"qualcomm","product":"qfs2530_firmware"},{"vendor":"qualcomm","product":"qfs2580_firmware"},{"vendor":"qualcomm","product":"qfs2608_firmware"},{"vendor":"qualcomm","product":"qfs2630_firmware"},{"vendor":"qualcomm","product":"qln4642_firmware"},{"vendor":"qualcomm","product":"qln4650_firmware"},{"vendor":"qualcomm","product":"qln5020_firmware"},{"vendor":"qualcomm","product":"qln5030_firmware"},{"vendor":"qualcomm","product":"qln5040_firmware"},{"vendor":"qualcomm","product":"qpa2625_firmware"},{"vendor":"qualcomm","product":"qpa4340_firmware"},{"vendor":"qualcomm","product":"qpa4360_firmware"},{"vendor":"qualcomm","product":"qpa5461_firmware"},{"vendor":"qualcomm","product":"qpa5580_firmware"},{"vendor":"qualcomm","product":"qpa5581_firmware"},{"vendor":"qualcomm","product":"qpa6560_firmware"},{"vendor":"qualcomm","product":"qpa8673_firmware"},{"vendor":"qualcomm","product":"qpa8686_firmware"},{"vendor":"qualcomm","product":"qpa8801_firmware"},{"vendor":"qualcomm","product":"qpa8802_firmware"},{"vendor":"qualcomm","product":"qpa8803_firmware"},{"vendor":"qualcomm","product":"qpa8821_firmware"},{"vendor":"qualcomm","product":"qpa8842_firmware"},{"vendor":"qualcomm","product":"qpm4621_firmware"},{"vendor":"qualcomm","product":"qpm4630_firmware"},{"vendor":"qualcomm","product":"qpm4640_firmware"},{"vendor":"qualcomm","product":"qpm4641_firmware"},{"vendor":"qualcomm","product":"qpm4650_firmware"},{"vendor":"qualcomm","product":"qpm5621_firmware"},{"vendor":"qualcomm","product":"qpm5641_firmware"},{"vendor":"qualcomm","product":"qpm5658_firmware"},{"vendor":"qualcomm","product":"qpm5670_firmware"},{"vendor":"qualcomm","product":"qpm5677_firmware"},{"vendor":"qualcomm","product":"qpm5679_firmware"},{"vendor":"qualcomm","product":"qpm5870_firmware"},{"vendor":"qualcomm","product":"qpm5875_firmware"},{"vendor":"qualcomm","product":"qpm6582_firmware"},{"vendor":"qualcomm","product":"qpm6585_firmware"},{"vendor":"qualcomm","product":"qpm6621_firmware"},{"vendor":"qualcomm","product":"qpm6670_firmware"},{"vendor":"qualcomm","product":"qpm8820_firmware"},{"vendor":"qualcomm","product":"qpm8830_firmware"},{"vendor":"qualcomm","product":"qpm8870_firmware"},{"vendor":"qualcomm","product":"qpm8895_firmware"},{"vendor":"qualcomm","product":"qsm7250_firmware"},{"vendor":"qualcomm","product":"qtc800s_firmware"},{"vendor":"qualcomm","product":"qtc801s_firmware"},{"vendor":"qualcomm","product":"qtm525_firmware"},{"vendor":"qualcomm","product":"qtm527_firmware"},{"vendor":"qualcomm","product":"rsw8577_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd6905g_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd8655g_firmware"},{"vendor":"qualcomm","product":"sd8885g_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdr051_firmware"},{"vendor":"qualcomm","product":"sdr052_firmware"},{"vendor":"qualcomm","product":"sdr660_firmware"},{"vendor":"qualcomm","product":"sdr675_firmware"},{"vendor":"qualcomm","product":"sdr735_firmware"},{"vendor":"qualcomm","product":"sdr735g_firmware"},{"vendor":"qualcomm","product":"sdr8150_firmware"},{"vendor":"qualcomm","product":"sdr865_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"sm7350_firmware"},{"vendor":"qualcomm","product":"smb1351_firmware"},{"vendor":"qualcomm","product":"smb1355_firmware"},{"vendor":"qualcomm","product":"smb1381_firmware"},{"vendor":"qualcomm","product":"smb1390_firmware"},{"vendor":"qualcomm","product":"smb1394_firmware"},{"vendor":"qualcomm","product":"smb1395_firmware"},{"vendor":"qualcomm","product":"smb1396_firmware"},{"vendor":"qualcomm","product":"smb1398_firmware"},{"vendor":"qualcomm","product":"smr525_firmware"},{"vendor":"qualcomm","product":"smr526_firmware"},{"vendor":"qualcomm","product":"smr545_firmware"},{"vendor":"qualcomm","product":"smr546_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11223"},{"url":"https://github.com/advisories/GHSA-vq29-7qhf-v4wv"},{"url":"https://source.android.com/security/bulletin/2021-03-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-11223","description":"Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2021-02-22T06:25:56Z","modified":"2024-08-04T11:28:13.385Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3577","description":"Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2021-02-22T06:25:56Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-vq29-7qhf-v4wv","title":"Out of bound in camera driver due to lack of check of validation of array index before copying...","description":"Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2022-05-24T17:42:44Z","modified":"2023-01-29T05:05:49Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:45:53.268312Z"}],"nvd":[{"id":"CVE-2020-11223","description":"Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2021-02-22T07:15:14.08Z","modified":"2026-06-17T02:49:37.507Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:34.188486Z"}],"osv":[{"id":"ASB-A-172349026","status":"published","published":"2021-03-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:14.18208Z"}]}}
