CVE-2020-11255

HIGH

Qualcomm Apq8009 Firmware - Memory Leak

Title source: rule

Description

Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

References (1)

[Vendor Advisory] https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Scores

CVSS v3 7.5

EPSS 0.0024

EPSS Percentile 47.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (50)

qualcomm/apq8009_firmware

qualcomm/apq8017_firmware

qualcomm/apq8037_firmware

qualcomm/apq8053_firmware

qualcomm/aqt1000_firmware

qualcomm/csrb31024_firmware

qualcomm/mdm8207_firmware

qualcomm/mdm9205_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9207_firmware

qualcomm/mdm9250_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9628_firmware

qualcomm/mdm9640_firmware

qualcomm/mdm9650_firmware

... and 35 more

Timeline

Published Apr 07, 2021

Tracked Since Feb 18, 2026