#VU112427 Buffer overflow in Qualcomm products - CVE-2020-11207
Published: July 7, 2025 / Updated: July 7, 2025
Vulnerability identifier: #VU112427
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear
CVE-ID: CVE-2020-11207
CWE-ID: CWE-120
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerable software:
APQ8052
APQ8056
APQ8076
APQ8096
APQ8096SG
MDM9655
MSM8952
MSM8956
MSM8976
MSM8976SG
MSM8996SG
QCM4290
QCM6125
QCS410
QCS4290
QCS610
QCS6125
QSM8250
SA6145P
SA6150P
SA6155
SA8150P
SA8155
SA8155P
SA8195P
SC7180
SDA640
SDA855
SDM640
SDM830
SDM850
SDX50M
SDX55M
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6150P
SM6250
SM6250P
SM6350
SM7125
SM7150P
SM7225
SM7250
SM7250P
SM8150P
SXR2130P
APQ8098
MSM8996
MSM8998
SA6155P
SDA660
SDA845
SDM660
SDM845
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
APQ8052
APQ8056
APQ8076
APQ8096
APQ8096SG
MDM9655
MSM8952
MSM8956
MSM8976
MSM8976SG
MSM8996SG
QCM4290
QCM6125
QCS410
QCS4290
QCS610
QCS6125
QSM8250
SA6145P
SA6150P
SA6155
SA8150P
SA8155
SA8155P
SA8195P
SC7180
SDA640
SDA855
SDM640
SDM830
SDM850
SDX50M
SDX55M
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6150P
SM6250
SM6250P
SM6350
SM7125
SM7150P
SM7225
SM7250
SM7250P
SM8150P
SXR2130P
APQ8098
MSM8996
MSM8998
SA6155P
SDA660
SDA845
SDM660
SDM845
SDX55
SM6150
SM7150
SM8150
SM8250
SXR2130
Software vendor:
Qualcomm
Qualcomm
Description
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Computer Vision. A local application can execute arbitrary code.
Remediation
Install security update from vendor's website.