#VU112429 Buffer over-read in Qualcomm products - CVE-2020-11132
Published: July 7, 2025
Vulnerability identifier: #VU112429
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L /SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2020-11132
CWE-ID: CWE-126
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
APQ8009
APQ8096AU
APQ8098
MDM9150
MDM9206
MDM9607
MDM9650
MSM8905
MSM8998
QCS405
QCS605
SA6155P
SC8180X
SDA845
SDM670
SDM710
SDM845
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR1130
SXR2130
MDM8207
MDM9205
MDM9207
MDM9250
MDM9628
MSM8108
MSM8208
MSM8209
MSM8608
MSM8909
QCM4290
QCS410
QCS4290
QCS603
QCS610
QSM8250
SA415M
SA515M
SA6145P
SA6150P
SA6155
SA8150P
SA8155
SA8155P
SA8195P
SC7180
SC8180X+SDX55
SC8180XP
SDA640
SDA670
SDA855
SDM1000
SDM640
SDM712
SDM830
SDM850
SDX50M
SDX55M
SM4125
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6150P
SM6250
SM6250P
SM6350
SM7125
SM7150P
SM7225
SM7250
SM7250P
SM8150P
SXR1120
SXR2130P
WCD9330
APQ8009
APQ8096AU
APQ8098
MDM9150
MDM9206
MDM9607
MDM9650
MSM8905
MSM8998
QCS405
QCS605
SA6155P
SC8180X
SDA845
SDM670
SDM710
SDM845
SDX24
SDX55
SM6150
SM7150
SM8150
SM8250
SXR1130
SXR2130
MDM8207
MDM9205
MDM9207
MDM9250
MDM9628
MSM8108
MSM8208
MSM8209
MSM8608
MSM8909
QCM4290
QCS410
QCS4290
QCS603
QCS610
QSM8250
SA415M
SA515M
SA6145P
SA6150P
SA6155
SA8150P
SA8155
SA8155P
SA8195P
SC7180
SC8180X+SDX55
SC8180XP
SDA640
SDA670
SDA855
SDM1000
SDM640
SDM712
SDM830
SDM850
SDX50M
SDX55M
SM4125
SM4250
SM4250P
SM6115
SM6115P
SM6125
SM6150P
SM6250
SM6250P
SM6350
SM7125
SM7150P
SM7225
SM7250
SM7250P
SM8150P
SXR1120
SXR2130P
WCD9330
Software vendor:
Qualcomm
Qualcomm
Description
The vulnerability allows a local privileged application to read and manipulate data.
The vulnerability exists due to improper input validation in Boot. A local privileged application can read and manipulate data.
Remediation
Install security update from vendor's website.