boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2020-11261AWAITING ENRICHMENT
Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  CVSS   EPSS    %ile   KEV
  —      .0177   76.4   YES
AFFECTED
  Product                                                                                                                                                                              Versions     Fixed
  Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables  unspecified  —
TIMELINE
  Dec 1   Added to CISA KEV, remediation due 2022-06-01
  Dec 1   Published
0 references · KEV due June 1, 2022

Lifecycle

Complete event history — 2 events, chronological
DateEventDetail
December 1, 2021KEV ADDEDAdded to CISA KEV, remediation due 2022-06-01
December 1, 2021PublishedPublished

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
QualcommSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables———

References

No references recorded.

Related

Authoritative record: CVE-2020-11261 at cve.org

Vendors: qualcomm

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2020-11261 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.