ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-11170

—
CVSS 3.1
9.8 critical
EPSS
<1%p55
Published
()
Modified
Description

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendors
qualcomm
Products
apq8009 firmware, apq8009w firmware, apq8017 firmware, apq8030 firmware, apq8037 firmware, apq8052 firmware, apq8053 firmware, apq8056 firmware, apq8060a firmware, apq8062 firmware, apq8064 firmware, apq8064au firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

No ingested article mentions this CVE yet.