CVE-2020-11127: Qualcomm MDM9205 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCM4290, QCS405, QCS410, QCS4290, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA845, SDA855, SDM1000, SDM640, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

Affected products

• Qualcomm MDM9205 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• Qualcomm QCS4290 Firmware: affected versions not specified
• Qualcomm QCS610 Firmware: affected versions not specified
• Qualcomm QSM8250 Firmware: affected versions not specified
• Qualcomm SA415M Firmware: affected versions not specified
• Qualcomm SA515M Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155 Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8150P Firmware: affected versions not specified
• Qualcomm SA8155 Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SC7180 Firmware: affected versions not specified
• Qualcomm SC8180X Firmware: affected versions not specified
• Qualcomm SC8180XP Firmware: affected versions not specified
• Qualcomm SDA640 Firmware: affected versions not specified
• Qualcomm SDA845 Firmware: affected versions not specified
• Qualcomm SDA855 Firmware: affected versions not specified
• Qualcomm SDM1000 Firmware: affected versions not specified
• Qualcomm SDM640 Firmware: affected versions not specified
• and 28 more

Published 2020-11-12. Last modified 2026-06-17.