CVEvulnerability
CVE-2020-11185
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected configurations
• qualcomm ar9380
• qualcomm csr8811
• qualcomm ipq4018
• qualcomm ipq4019
• qualcomm ipq4028
• qualcomm ipq4029
• qualcomm ipq6000
• qualcomm ipq6005
• qualcomm ipq6010
• qualcomm ipq6018
• qualcomm ipq6028
• qualcomm ipq8064
• qualcomm ipq8065
• qualcomm ipq8068
• qualcomm ipq8070
• qualcomm ipq8070a
• qualcomm ipq8071
• qualcomm ipq8071a
• qualcomm ipq8072
• qualcomm ipq8072a
• qualcomm ipq8074
• qualcomm ipq8074a
• qualcomm ipq8076
• qualcomm ipq8076a
• qualcomm ipq8078
• qualcomm ipq8078a
• qualcomm ipq8173
• qualcomm ipq8174
• qualcomm pm3003a
• qualcomm pm7350c
• qualcomm pm8008
• qualcomm pm8009
• qualcomm pm8350
• qualcomm pm8350b
• qualcomm pm8350bh
• qualcomm pm8350bhs
• qualcomm pm8350c
• qualcomm pmk7350
• qualcomm pmk8002
• qualcomm pmk8350
• qualcomm pmm6155au
• qualcomm pmm8155au
• qualcomm pmm8195au
• qualcomm pmm855au
• qualcomm pmr525
• qualcomm pmr735a
• qualcomm pmr735b
• qualcomm pmx55
• qualcomm qat3514
• qualcomm qat3516
• qualcomm qat3518
• qualcomm qat3519
• qualcomm qat3555
• qualcomm qat5515
• qualcomm qat5516
• qualcomm qat5522
• qualcomm qat5568
• qualcomm qca4024
• qualcomm qca6175a
• qualcomm qca6390
… and 135 more
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin Broken Link