CVE-2020-11146: Qualcomm APQ8076

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm APQ8076: affected versions not specified
• Qualcomm AQT1000: affected versions not specified
• Qualcomm AR8031: affected versions not specified
• Qualcomm AR8035: affected versions not specified
• Qualcomm CSRA6620: affected versions not specified
• Qualcomm CSRA6640: affected versions not specified
• Qualcomm MSM8937: affected versions not specified
• Qualcomm PM215: affected versions not specified
• Qualcomm PM3003A: affected versions not specified
• Qualcomm PM4125: affected versions not specified
• Qualcomm PM456: affected versions not specified
• Qualcomm PM6125: affected versions not specified
• Qualcomm PM6150: affected versions not specified
• Qualcomm PM6150A: affected versions not specified
• Qualcomm PM6150L: affected versions not specified
• Qualcomm PM6250: affected versions not specified
• Qualcomm PM6350: affected versions not specified
• Qualcomm PM640A: affected versions not specified
• Qualcomm PM640L: affected versions not specified
• Qualcomm PM640P: affected versions not specified
• Qualcomm PM660: affected versions not specified
• Qualcomm PM660L: affected versions not specified
• Qualcomm PM670: affected versions not specified
• Qualcomm PM670L: affected versions not specified
• Qualcomm PM7150A: affected versions not specified
• and 289 more

Published 2021-01-21. Last modified 2026-06-17.