CVE-2020-11203: Qualcomm APQ8009W Firmware

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm APQ8009W Firmware: affected versions not specified
• Qualcomm APQ8064AU Firmware: affected versions not specified
• Qualcomm APQ8096AU Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm PM215 Firmware: affected versions not specified
• Qualcomm PM456 Firmware: affected versions not specified
• Qualcomm PM6125 Firmware: affected versions not specified
• Qualcomm PM6150 Firmware: affected versions not specified
• Qualcomm PM6150A Firmware: affected versions not specified
• Qualcomm PM6150L Firmware: affected versions not specified
• Qualcomm PM6250 Firmware: affected versions not specified
• Qualcomm PM640A Firmware: affected versions not specified
• Qualcomm PM640L Firmware: affected versions not specified
• Qualcomm PM640P Firmware: affected versions not specified
• Qualcomm PM670 Firmware: affected versions not specified
• Qualcomm PM670L Firmware: affected versions not specified
• Qualcomm PM8004 Firmware: affected versions not specified
• Qualcomm PM8005 Firmware: affected versions not specified
• Qualcomm PM8008 Firmware: affected versions not specified
• Qualcomm PM8009 Firmware: affected versions not specified
• Qualcomm PM855 Firmware: affected versions not specified
• Qualcomm PM855B Firmware: affected versions not specified
• Qualcomm PM855L Firmware: affected versions not specified
• and 118 more

Published 2021-02-22. Last modified 2026-06-17.