CVEvulnerability

CVE-2020-11169

9.1 CRITICAL Published 2020-11-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-125, CWE-190

Description

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8053 firmware • qualcomm qca6390 firmware • qualcomm qcn7605 firmware • qualcomm qcn7606 firmware • qualcomm sa415m firmware • qualcomm sa515m firmware • qualcomm sa6155p firmware • qualcomm sa8155p firmware • qualcomm sc8180x firmware • qualcomm sdx55 firmware

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-190 Integer Overflow or Wraparound weakness

References