CVE-2020-11286: Qualcomm APQ8009

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm APQ8009: affected versions not specified
• Qualcomm APQ8009W: affected versions not specified
• Qualcomm APQ8017: affected versions not specified
• Qualcomm APQ8053: affected versions not specified
• Qualcomm APQ8064AU: affected versions not specified
• Qualcomm APQ8076: affected versions not specified
• Qualcomm APQ8096AU: affected versions not specified
• Qualcomm AR8151: affected versions not specified
• Qualcomm CSR6030: affected versions not specified
• Qualcomm MDM9206: affected versions not specified
• Qualcomm MDM9230: affected versions not specified
• Qualcomm MDM9250: affected versions not specified
• Qualcomm MDM9330: affected versions not specified
• Qualcomm MDM9607: affected versions not specified
• Qualcomm MDM9626: affected versions not specified
• Qualcomm MDM9628: affected versions not specified
• Qualcomm MDM9630: affected versions not specified
• Qualcomm MDM9640: affected versions not specified
• Qualcomm MDM9650: affected versions not specified
• Qualcomm MDM9655: affected versions not specified
• Qualcomm MSM8909W: affected versions not specified
• Qualcomm MSM8937: affected versions not specified
• Qualcomm MSM8996AU: affected versions not specified
• Qualcomm PM660: affected versions not specified
• Qualcomm PM660A: affected versions not specified
• and 110 more

Published 2021-02-22. Last modified 2026-06-17.