CVE-2020-11181: Qualcomm PM3003A Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm PM3003A Firmware: affected versions not specified
• Qualcomm PM8009 Firmware: affected versions not specified
• Qualcomm PM8150A Firmware: affected versions not specified
• Qualcomm PM8150B Firmware: affected versions not specified
• Qualcomm PM8150C Firmware: affected versions not specified
• Qualcomm PM8150L Firmware: affected versions not specified
• Qualcomm PM8250 Firmware: affected versions not specified
• Qualcomm PMK8002 Firmware: affected versions not specified
• Qualcomm PMR525 Firmware: affected versions not specified
• Qualcomm PMX55 Firmware: affected versions not specified
• Qualcomm QBT2000 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6421 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6431 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QFS2530 Firmware: affected versions not specified
• Qualcomm QFS2580 Firmware: affected versions not specified
• Qualcomm QSM8250 Firmware: affected versions not specified
• Qualcomm QTC800H Firmware: affected versions not specified
• Qualcomm QTC801S Firmware: affected versions not specified
• Qualcomm SD865 5g Firmware: affected versions not specified
• Qualcomm SDR8250 Firmware: affected versions not specified
• Qualcomm SDR865 Firmware: affected versions not specified
• and 14 more

Published 2021-01-21. Last modified 2026-06-17.