CVE-2020-11215
CRITICALQualcomm AQT1000 and Snapdragon - Out-of-bounds Read in VSA Attribute Processing
Title source: llmDescription
An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References (2)
Core 2
Core References
Broken Link x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
Scores
CVSS v3
9.1
EPSS
0.0088
EPSS Percentile
54.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (50)
qualcomm/aqt1000
qualcomm/ar8031
qualcomm/ar8035
qualcomm/ar9380
qualcomm/csr8811
qualcomm/csra6620
qualcomm/csra6640
qualcomm/csrb31024
qualcomm/ipq4018
qualcomm/ipq4028
... and 40 more
Published
Jan 21, 2021
Tracked Since
Feb 18, 2026