Actively exploited in the wild
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Qualcomm - Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables · Listed in the CISA KEV since 2021-12-01. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-11261
HighCVSS 7.8KEVSummary
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables.
Risk Assessment
May lead to memory corruption and potential code execution or device instability across a wide range of Snapdragon-based devices.
Recommendation
Apply security updates provided by the device vendor or Qualcomm for the relevant Snapdragon platforms.
Other vulnerabilities in Qualcomm Snapdragon
Original NVD description (English source)
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables