AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-11140

CRITICAL · CVSS 9.8 EPSS 1.05%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-01-21 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2020-11140
Severity
CRITICAL
CVSS
9.8
EPSS
1.05%

Original NVD Description

Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Related CVEs

Other vulnerabilities affecting the same vendor(s)