CVE-2020-11169 PUBLISHED CVSS 9.100000381469727 CRITICAL

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

EPSS 0.29% · 51.9th percentile

Risk Scores

CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
0.29%
51.9th percentile

Affected Products

VendorProductVersions
qualcommapq8009_firmware
qualcommsa515m_firmware
qualcommqcn7606_firmware
qualcommapq8053_firmware
qualcommsa6155p_firmware
qualcommsc8180x_firmware
qualcommsa8155p_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingAPQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55
qualcommqcn7605_firmware
qualcommsa415m_firmware
qualcommsdx55_firmware
qualcommqca6390_firmware

Timeline

References

Open in Interactive Console →