Integer overflow in Qualcomm products - CVE-2020-11196
Published: July 7, 2025
Vulnerability identifier: #VU112422
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-11196
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to read and manipulate data.
The vulnerability exists due to improper input validation in Video. A remote attacker can read and manipulate data.
Affected software
SDM670
SDX55
SDX20
SDM845
SDM710
SDM660
SDM636
SDM632
SDM630
SDM450
SDM439
SDM429W
SDM429
SXR2130
SXR1130
SM8250
SM8150
SDA845
SM7150
SM6150
MDM9650
MSM8996AU
MSM8996
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
MSM8905
MSM8998
MDM9206
APQ8098
APQ8096AU
APQ8053
APQ8017
SDA660
SA6155P
APQ8009
QM215
QCS605
QCS405
SM4250
SM4125
SDX55M
SDX50M
SDX20M
SDW2500
SDM830
SM4250P
SDM640
SDM455
SM7150P
WCD9330
SXR2130P
SXR1120
SM8150P
SM7250P
SM7250
SM7225
SM7125
SM6350
SM6250P
SM6250
SM6150P
SM6125
SM6115P
SM6115
MSM8996SG
MSM8909
APQ8096SG
APQ8096
APQ8064AU
APQ8037
APQ8009W
SA6145P
SDA670
SDA640
SDA429W
SA8195P
SA8155P
SA8155
SA8150P
SA6155
SA6150P
QCS6125
QCS610
QCS603
QCS4290
QCS410
QCM6125
QCM4290
SDX55
SDX20
SDM845
SDM710
SDM660
SDM636
SDM632
SDM630
SDM450
SDM439
SDM429W
SDM429
SXR2130
SXR1130
SM8250
SM8150
SDA845
SM7150
SM6150
MDM9650
MSM8996AU
MSM8996
MSM8953
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
MSM8905
MSM8998
MDM9206
APQ8098
APQ8096AU
APQ8053
APQ8017
SDA660
SA6155P
APQ8009
QM215
QCS605
QCS405
SM4250
SM4125
SDX55M
SDX50M
SDX20M
SDW2500
SDM830
SM4250P
SDM640
SDM455
SM7150P
WCD9330
SXR2130P
SXR1120
SM8150P
SM7250P
SM7250
SM7225
SM7125
SM6350
SM6250P
SM6250
SM6150P
SM6125
SM6115P
SM6115
MSM8996SG
MSM8909
APQ8096SG
APQ8096
APQ8064AU
APQ8037
APQ8009W
SA6145P
SDA670
SDA640
SDA429W
SA8195P
SA8155P
SA8155
SA8150P
SA6155
SA6150P
QCS6125
QCS610
QCS603
QCS4290
QCS410
QCM6125
QCM4290
How to mitigate CVE-2020-11196
Install security update from vendor's website.