CVEvulnerability
CVE-2020-11167
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190, CWE-787
Description
Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm apq8009w
• qualcomm apq8017
• qualcomm apq8037
• qualcomm apq8053
• qualcomm apq8064au
• qualcomm apq8096au
• qualcomm aqt1000
• qualcomm msm8909w
• qualcomm msm8917
• qualcomm msm8920
• qualcomm msm8937
• qualcomm msm8940
• qualcomm msm8953
• qualcomm msm8996au
• qualcomm pm215
• qualcomm pm3003a
• qualcomm pm439
• qualcomm pm6125
• qualcomm pm6150
• qualcomm pm6150a
• qualcomm pm6150l
• qualcomm pm6350
• qualcomm pm640a
• qualcomm pm640l
• qualcomm pm640p
• qualcomm pm660
• qualcomm pm660l
• qualcomm pm670
• qualcomm pm670a
• qualcomm pm670l
• qualcomm pm7150a
• qualcomm pm7150l
• qualcomm pm7250
• qualcomm pm7250b
• qualcomm pm8004
• qualcomm pm8005
• qualcomm pm8008
• qualcomm pm8009
• qualcomm pm8150a
• qualcomm pm8150b
• qualcomm pm8150c
• qualcomm pm8150l
• qualcomm pm8250
• qualcomm pm855
• qualcomm pm855a
• qualcomm pm855b
• qualcomm pm855l
• qualcomm pm855p
• qualcomm pm8909
• qualcomm pm8937
• qualcomm pm8940
• qualcomm pm8953
• qualcomm pm8996
• qualcomm pm8998
• qualcomm pmi632
• qualcomm pmi8937
• qualcomm pmi8952
• qualcomm pmi8994
• qualcomm pmi8996
• qualcomm pmi8998
… and 226 more
Related
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link