{"id":"CVE-2020-11305","aliases":["EUVD-2020-3659","GHSA-p4pg-24vx-r358"],"status":"published","title":"Integer overflow in boot due to improper length check on arguments received in Snapdragon...","description":"Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00212,"percentile":0.11553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2021-03-17T06:01:02Z","modified":"2026-06-17T02:50:06Z","products":[{"vendor":"qualcomm","product":"apq8009_firmware"},{"vendor":"qualcomm","product":"apq8053_firmware"},{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"pm8909_firmware"},{"vendor":"qualcomm","product":"pm8916_firmware"},{"vendor":"qualcomm","product":"pm8953_firmware"},{"vendor":"qualcomm","product":"pmd9607_firmware"},{"vendor":"qualcomm","product":"pmi8952_firmware"},{"vendor":"qualcomm","product":"qca9367_firmware"},{"vendor":"qualcomm","product":"qca9377_firmware"},{"vendor":"qualcomm","product":"smb1358_firmware"},{"vendor":"qualcomm","product":"smb1360_firmware"},{"vendor":"qualcomm","product":"smb231_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9330_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3680b_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wtr2965_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon consumer iot, snapdragon industrial iot, snapdragon voice \u0026 music"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11305"},{"url":"https://github.com/advisories/GHSA-p4pg-24vx-r358"}],"sources":{"cve":[{"id":"CVE-2020-11305","description":"Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music","status":"published","published":"2021-03-17T06:01:02Z","modified":"2024-08-04T11:28:13.911Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3659","description":"Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music","status":"published","published":"2021-03-17T06:01:02Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.032228Z"}],"ghsa":[{"id":"GHSA-p4pg-24vx-r358","title":"Integer overflow in boot due to improper length check on arguments received in Snapdragon...","description":"Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music","status":"published","published":"2022-05-24T17:44:41Z","modified":"2023-01-29T05:06:05Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:56.584389Z"}],"nvd":[{"id":"CVE-2020-11305","description":"Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music","status":"published","published":"2021-03-17T06:15:14.437Z","modified":"2026-06-17T02:50:06.417Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}