CVE-2020-11267

HIGH

Qualcomm APQ8009 and related firmware - Stack Out-of-Bounds Write via Cipher Device IV Length

Title source: llm
STIX 2.1

Description

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

References (1)

Core 1
Core References

Scores

CVSS v3 8.4
EPSS 0.0004
EPSS Percentile 13.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (50)
qualcomm/apq8009_firmware
qualcomm/apq8009w_firmware
qualcomm/apq8017_firmware
qualcomm/apq8053_firmware
qualcomm/apq8064au_firmware
qualcomm/apq8076_firmware
qualcomm/apq8096au_firmware
qualcomm/aqt1000_firmware
qualcomm/ar7420_firmware
qualcomm/ar8031_firmware
... and 40 more
Published Jun 09, 2021
Tracked Since Feb 18, 2026