Exploited Vulnerabilities DailyCVE-2020-11261: Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
EPSS1.6%No. 1620 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV12
Same product1
| Field | Value |
|---|---|
| Vendor | Qualcomm |
| Product | Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables |
| Name | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability |
| Added to KEV | 2021-12-01 |
| US federal due date | 2022-06-01 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-12-01.