CVE-2020-11163

CRITICAL

Qualcomm Firmware - Buffer Overflow via IKEv2 Parameter Update

Title source: llm

Description

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Scores

CVSS v3 9.8

EPSS 0.0036

EPSS Percentile 58.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-129

Status published

Products (50)

qualcomm/apq8017_firmware

qualcomm/aqt1000_firmware

qualcomm/ar8035_firmware

qualcomm/csrb31024_firmware

qualcomm/msm8917_firmware

qualcomm/pm215_firmware

qualcomm/pm3003a_firmware

qualcomm/pm4125_firmware

qualcomm/pm4250_firmware

qualcomm/pm439_firmware

... and 40 more

Published Feb 22, 2021

Tracked Since Feb 18, 2026