{"id":"CVE-2020-11286","aliases":["2755788","A-172348990","ASB-A-172348990","EUVD-2020-3640","GHSA-f3gr-qvc9-j8pv"],"status":"published","title":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple...","description":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface \u0026 endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00174,"percentile":0.06909,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-476"],"published":"2021-02-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2021-02-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-02-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"apq8009"},{"vendor":"qualcomm","product":"apq8009w"},{"vendor":"qualcomm","product":"apq8017"},{"vendor":"qualcomm","product":"apq8053"},{"vendor":"qualcomm","product":"apq8064au"},{"vendor":"qualcomm","product":"apq8076"},{"vendor":"qualcomm","product":"apq8096au"},{"vendor":"qualcomm","product":"ar8151"},{"vendor":"qualcomm","product":"csr6030"},{"vendor":"qualcomm","product":"mdm9206"},{"vendor":"qualcomm","product":"mdm9230"},{"vendor":"qualcomm","product":"mdm9250"},{"vendor":"qualcomm","product":"mdm9330"},{"vendor":"qualcomm","product":"mdm9607"},{"vendor":"qualcomm","product":"mdm9626"},{"vendor":"qualcomm","product":"mdm9628"},{"vendor":"qualcomm","product":"mdm9630"},{"vendor":"qualcomm","product":"mdm9640"},{"vendor":"qualcomm","product":"mdm9650"},{"vendor":"qualcomm","product":"mdm9655"},{"vendor":"qualcomm","product":"msm8909w"},{"vendor":"qualcomm","product":"msm8937"},{"vendor":"qualcomm","product":"msm8996au"},{"vendor":"qualcomm","product":"pm660"},{"vendor":"qualcomm","product":"pm660a"},{"vendor":"qualcomm","product":"pm660l"},{"vendor":"qualcomm","product":"pm8004"},{"vendor":"qualcomm","product":"pm8005"},{"vendor":"qualcomm","product":"pm8909"},{"vendor":"qualcomm","product":"pm8916"},{"vendor":"qualcomm","product":"pm8937"},{"vendor":"qualcomm","product":"pm8952"},{"vendor":"qualcomm","product":"pm8953"},{"vendor":"qualcomm","product":"pm8956"},{"vendor":"qualcomm","product":"pm8996"},{"vendor":"qualcomm","product":"pm8998"},{"vendor":"qualcomm","product":"pmd9607"},{"vendor":"qualcomm","product":"pmd9635"},{"vendor":"qualcomm","product":"pmd9645"},{"vendor":"qualcomm","product":"pmd9655"},{"vendor":"qualcomm","product":"pmi8937"},{"vendor":"qualcomm","product":"pmi8952"},{"vendor":"qualcomm","product":"pmi8994"},{"vendor":"qualcomm","product":"pmi8996"},{"vendor":"qualcomm","product":"pmi8998"},{"vendor":"qualcomm","product":"pmk8001"},{"vendor":"qualcomm","product":"pmm8996au"},{"vendor":"qualcomm","product":"pmx20"},{"vendor":"qualcomm","product":"qat3514"},{"vendor":"qualcomm","product":"qat3522"},{"vendor":"qualcomm","product":"qat3550"},{"vendor":"qualcomm","product":"qbt1000"},{"vendor":"qualcomm","product":"qbt1500"},{"vendor":"qualcomm","product":"qca6174"},{"vendor":"qualcomm","product":"qca6174a"},{"vendor":"qualcomm","product":"qca6310"},{"vendor":"qualcomm","product":"qca6320"},{"vendor":"qualcomm","product":"qca6564a"},{"vendor":"qualcomm","product":"qca6564au"},{"vendor":"qualcomm","product":"qca6574"},{"vendor":"qualcomm","product":"qca6574a"},{"vendor":"qualcomm","product":"qca6574au"},{"vendor":"qualcomm","product":"qca6584"},{"vendor":"qualcomm","product":"qca6584au"},{"vendor":"qualcomm","product":"qca9367"},{"vendor":"qualcomm","product":"qca9377"},{"vendor":"qualcomm","product":"qet4100"},{"vendor":"qualcomm","product":"qet4101"},{"vendor":"qualcomm","product":"qet4200aq"},{"vendor":"qualcomm","product":"qfe1035"},{"vendor":"qualcomm","product":"qfe1040"},{"vendor":"qualcomm","product":"qfe1045"},{"vendor":"qualcomm","product":"qfe2340"},{"vendor":"qualcomm","product":"qfe2550"},{"vendor":"qualcomm","product":"qfe3100"},{"vendor":"qualcomm","product":"qfe3320"},{"vendor":"qualcomm","product":"qfe3335"},{"vendor":"qualcomm","product":"qfe3345"},{"vendor":"qualcomm","product":"qln1021aq"},{"vendor":"qualcomm","product":"qln1030"},{"vendor":"qualcomm","product":"qln1031"},{"vendor":"qualcomm","product":"qln1036aq"},{"vendor":"qualcomm","product":"qpa4340"},{"vendor":"qualcomm","product":"qpa4360"},{"vendor":"qualcomm","product":"qpa5460"},{"vendor":"qualcomm","product":"qsw8573"},{"vendor":"qualcomm","product":"qtc800h"},{"vendor":"qualcomm","product":"qtc800s"},{"vendor":"qualcomm","product":"qtc800t"},{"vendor":"qualcomm","product":"rgr7640au"},{"vendor":"qualcomm","product":"rsw8577"},{"vendor":"qualcomm","product":"sd205"},{"vendor":"qualcomm","product":"sd210"},{"vendor":"qualcomm","product":"sd660"},{"vendor":"qualcomm","product":"sd820"},{"vendor":"qualcomm","product":"sd821"},{"vendor":"qualcomm","product":"sd835"},{"vendor":"qualcomm","product":"sd_636"},{"vendor":"qualcomm","product":"sdm630"},{"vendor":"qualcomm","product":"sdr660"},{"vendor":"qualcomm","product":"sdw2500"},{"vendor":"qualcomm","product":"sdw3100"},{"vendor":"qualcomm","product":"sdx20"},{"vendor":"qualcomm","product":"sdx20m"},{"vendor":"qualcomm","product":"smb1350"},{"vendor":"qualcomm","product":"smb1351"},{"vendor":"qualcomm","product":"smb1357"},{"vendor":"qualcomm","product":"smb1358"},{"vendor":"qualcomm","product":"smb1360"},{"vendor":"qualcomm","product":"smb1380"},{"vendor":"qualcomm","product":"smb231"},{"vendor":"qualcomm","product":"smb358s"},{"vendor":"qualcomm","product":"wcd9306"},{"vendor":"qualcomm","product":"wcd9326"},{"vendor":"qualcomm","product":"wcd9330"},{"vendor":"qualcomm","product":"wcd9335"},{"vendor":"qualcomm","product":"wcd9340"},{"vendor":"qualcomm","product":"wcd9341"},{"vendor":"qualcomm","product":"wcn3610"},{"vendor":"qualcomm","product":"wcn3615"},{"vendor":"qualcomm","product":"wcn3620"},{"vendor":"qualcomm","product":"wcn3660b"},{"vendor":"qualcomm","product":"wcn3680b"},{"vendor":"qualcomm","product":"wcn3980"},{"vendor":"qualcomm","product":"wcn3990"},{"vendor":"qualcomm","product":"wgr7640"},{"vendor":"qualcomm","product":"wsa8810"},{"vendor":"qualcomm","product":"wsa8815"},{"vendor":"qualcomm","product":"wtr2955"},{"vendor":"qualcomm","product":"wtr2965"},{"vendor":"qualcomm","product":"wtr3905"},{"vendor":"qualcomm","product":"wtr3925"},{"vendor":"qualcomm","product":"wtr3950"},{"vendor":"qualcomm","product":"wtr4905"},{"vendor":"qualcomm","product":"wtr5975"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11286"},{"url":"https://github.com/advisories/GHSA-f3gr-qvc9-j8pv"},{"url":"https://source.android.com/security/bulletin/2021-02-01","tags":["advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=79856f1b189faf189f8cf43e7222fc0b5138563e","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2020-11286","description":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface \u0026 endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-02-22T06:26:05Z","modified":"2024-08-04T11:28:13.808Z","updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-3640","description":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface \u0026 endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-02-22T06:26:05Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-f3gr-qvc9-j8pv","title":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple...","description":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface \u0026 endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-05-24T17:42:46Z","modified":"2023-01-29T05:05:49Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:45:53.268312Z"}],"nvd":[{"id":"CVE-2020-11286","description":"An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface \u0026 endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-02-22T07:15:15.143Z","modified":"2026-06-17T02:49:59.99Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:06:34.188486Z"}],"osv":[{"id":"ASB-A-172348990","status":"published","published":"2021-02-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:14.18208Z"}]}}