CVE-2020-11202

CVE-2020-11202 is a high-severity buffer overflow/underflow vulnerability affecting numerous Qualcomm Snapdragon chipsets across various product lines, including Auto, Compute, Consumer IoT, Industrial IoT, and Mobile. This flaw arises from incorrect typecasting of an internally passed buffer, leading to a misalignment with the structure's actual size. With a CVSS score of 7.8, it presents a local attack vector with low complexity, allowing an attacker to achieve high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation (KEV: No) and no public exploit code available (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, indicating widespread awareness of its potential impact on a large number of devices.