{"id":"CVE-2020-11266","aliases":["EUVD-2020-3620","GHSA-wfw6-x9m5-6g55"],"status":"published","title":"Image address is dereferenced before validating its range which can cause potential QSEE...","description":"Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00168,"percentile":0.06212,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-06-09T05:00:52Z","modified":"2026-06-17T02:49:51Z","products":[{"vendor":"qualcomm","product":"ar7420_firmware"},{"vendor":"qualcomm","product":"ar9580_firmware"},{"vendor":"qualcomm","product":"csr8811_firmware"},{"vendor":"qualcomm","product":"ipq4018_firmware"},{"vendor":"qualcomm","product":"ipq4019_firmware"},{"vendor":"qualcomm","product":"ipq4028_firmware"},{"vendor":"qualcomm","product":"ipq4029_firmware"},{"vendor":"qualcomm","product":"qca10901_firmware"},{"vendor":"qualcomm","product":"qca4024_firmware"},{"vendor":"qualcomm","product":"qca7500_firmware"},{"vendor":"qualcomm","product":"qca7520_firmware"},{"vendor":"qualcomm","product":"qca7550_firmware"},{"vendor":"qualcomm","product":"qca8075_firmware"},{"vendor":"qualcomm","product":"qca9880_firmware"},{"vendor":"qualcomm","product":"qca9886_firmware"},{"vendor":"qualcomm","product":"qca9888_firmware"},{"vendor":"qualcomm","product":"qca9889_firmware"},{"vendor":"qualcomm","product":"qca9898_firmware"},{"vendor":"qualcomm","product":"qca9984_firmware"},{"vendor":"qualcomm","product":"qca9992_firmware"},{"vendor":"qualcomm","product":"qca9994_firmware"},{"vendor":"qualcomm","product":"qcn3018_firmware"},{"vendor":"qualcomm","product":"qfe1922_firmware"},{"vendor":"qualcomm","product":"qfe1952_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11266"},{"url":"https://github.com/advisories/GHSA-wfw6-x9m5-6g55"}],"sources":{"cve":[{"id":"CVE-2020-11266","description":"Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:00:52Z","modified":"2024-08-04T11:28:13.451Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3620","description":"Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:00:52Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-wfw6-x9m5-6g55","title":"Image address is dereferenced before validating its range which can cause potential QSEE...","description":"Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-05-24T19:04:42Z","modified":"2023-01-29T05:06:29Z","updated_at":"2026-11-02T14:46:02.46151Z"}],"nvd":[{"id":"CVE-2020-11266","description":"Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-06-09T05:15:07.723Z","modified":"2026-06-17T02:49:51.157Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:43.288951Z"}]}}