CVE-2020-11216: Qualcomm APQ8009

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm APQ8009: affected versions not specified
• Qualcomm APQ8009W: affected versions not specified
• Qualcomm APQ8017: affected versions not specified
• Qualcomm APQ8037: affected versions not specified
• Qualcomm APQ8053: affected versions not specified
• Qualcomm APQ8064AU: affected versions not specified
• Qualcomm APQ8096AU: affected versions not specified
• Qualcomm AQT1000: affected versions not specified
• Qualcomm AR8031: affected versions not specified
• Qualcomm AR8151: affected versions not specified
• Qualcomm CSRA6620: affected versions not specified
• Qualcomm CSRA6640: affected versions not specified
• Qualcomm FSM10055: affected versions not specified
• Qualcomm FSM10056: affected versions not specified
• Qualcomm MDM9206: affected versions not specified
• Qualcomm MDM9650: affected versions not specified
• Qualcomm MSM8909W: affected versions not specified
• Qualcomm MSM8917: affected versions not specified
• Qualcomm MSM8920: affected versions not specified
• Qualcomm MSM8937: affected versions not specified
• Qualcomm MSM8940: affected versions not specified
• Qualcomm MSM8953: affected versions not specified
• Qualcomm MSM8996AU: affected versions not specified
• Qualcomm PM215: affected versions not specified
• Qualcomm PM3003A: affected versions not specified
• and 344 more

Published 2021-01-21. Last modified 2026-06-17.