#VU112418 Untrusted Pointer Dereference in Qualcomm products - CVE-2020-11168
Published: July 7, 2025
Vulnerability identifier: #VU112418
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2020-11168
CWE-ID: CWE-822
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
APQ8009
APQ8017
APQ8053
APQ8096AU
APQ8098
MDM9206
MDM9650
MSM8909W
MSM8953
MSM8996AU
QCS405
QCS605
QM215
SA6155P
SDA660
SDA845
SDM429
SDM429W
SDM450
SDM632
SDM845
SDX20
SDX55
SM8150
SM8250
SXR2130
APQ8009W
APQ8064AU
QCM4290
QCS4290
QCS603
QSM8350
SA6155
SA8155
SA8155P
SDA429W
SDA640
SDA855
SDM1000
SDM640
SDM830
SDW2500
SDX20M
SDX50M
SDX55M
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6250
SM6350
SM7125
SM7225
SM7250
SM7250P
SM8150P
SM8350
SM8350P
SXR2130P
WCD9330
APQ8009
APQ8017
APQ8053
APQ8096AU
APQ8098
MDM9206
MDM9650
MSM8909W
MSM8953
MSM8996AU
QCS405
QCS605
QM215
SA6155P
SDA660
SDA845
SDM429
SDM429W
SDM450
SDM632
SDM845
SDX20
SDX55
SM8150
SM8250
SXR2130
APQ8009W
APQ8064AU
QCM4290
QCS4290
QCS603
QSM8350
SA6155
SA8155
SA8155P
SDA429W
SDA640
SDA855
SDM1000
SDM640
SDM830
SDW2500
SDX20M
SDX50M
SDX55M
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6250
SM6350
SM7125
SM7225
SM7250
SM7250P
SM8150P
SM8350
SM8350P
SXR2130P
WCD9330
Software vendor:
Qualcomm
Qualcomm
Description
The vulnerability allows a remote attacker to read and manipulate data.
The vulnerability exists due to improper input validation in Video. A remote attacker can read and manipulate data.
Remediation
Install security update from vendor's website.