CVE-2020-11292

CVE-2020-11292 is a heap overflow in Qualcomm's QMI Voice API exposed by the MSM modem (MSM/QMI Voice service). The qmi_voicei_srvcc_call_config_req handler may overflow modem heap if the number of calls field is set high, enabling potential remote code execution via a malicious Android app. Thre...