CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-06-09
Qualcomm Snapdragon Chipset Memory Corruption and Local Privilege Escalation Vulnerability (CVE-2020-11261) Analysis & Mitigation Guide
[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables chipsets
[Impact] Local attackers can trigger memory corruption (CWE-787) due to improper input validation when requesting huge memory allocations, potentially leading to local privilege escalation (LPE) and arbitrary code execution
[Mitigation] Apply the latest security patches released by device OEMs (January 2021 or later) and update Android devices to the latest security patch level