CVE-2020-11150: Qualcomm AQT1000

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm AQT1000: affected versions not specified
• Qualcomm AR8031: affected versions not specified
• Qualcomm AR8035: affected versions not specified
• Qualcomm CSRA6620: affected versions not specified
• Qualcomm CSRA6640: affected versions not specified
• Qualcomm PM215: affected versions not specified
• Qualcomm PM3003A: affected versions not specified
• Qualcomm PM6125: affected versions not specified
• Qualcomm PM6150: affected versions not specified
• Qualcomm PM6150A: affected versions not specified
• Qualcomm PM6150L: affected versions not specified
• Qualcomm PM6350: affected versions not specified
• Qualcomm PM640A: affected versions not specified
• Qualcomm PM640L: affected versions not specified
• Qualcomm PM640P: affected versions not specified
• Qualcomm PM660: affected versions not specified
• Qualcomm PM660L: affected versions not specified
• Qualcomm PM670: affected versions not specified
• Qualcomm PM670A: affected versions not specified
• Qualcomm PM670L: affected versions not specified
• Qualcomm PM7150A: affected versions not specified
• Qualcomm PM7150L: affected versions not specified
• Qualcomm PM7250: affected versions not specified
• Qualcomm PM7250B: affected versions not specified
• Qualcomm PM7350C: affected versions not specified
• and 255 more

Published 2021-01-21. Last modified 2026-06-17.