Integer overflow in Qualcomm products - CVE-2020-11131
Published: July 7, 2025
Vulnerability identifier: #VU112434
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-11131
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation in WLAN. A local privileged application can execute arbitrary code.
Affected software
APQ8009
APQ8053
APQ8096AU
MDM9206
MDM9640
MDM9650
MSM8996AU
QCS405
SDA845
SDX20
MDM9250
MDM9628
SDX20M
WCD9330
APQ8053
APQ8096AU
MDM9206
MDM9640
MDM9650
MSM8996AU
QCS405
SDA845
SDX20
MDM9250
MDM9628
SDX20M
WCD9330
How to mitigate CVE-2020-11131
Install security update from vendor's website.