CVE-2020-11303

HIGH

Qualcomm Apq8009 Firmware - Exposure to Wrong Actor

Title source: rule

Description

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

References (1)

[Vendor Advisory] https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Scores

CVSS v3 8.6

EPSS 0.0024

EPSS Percentile 46.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-668

Status published

Affected Products (50)

qualcomm/apq8009_firmware

qualcomm/apq8053_firmware

qualcomm/apq8064au_firmware

qualcomm/apq8076_firmware

qualcomm/apq8092_firmware

qualcomm/apq8094_firmware

qualcomm/apq8096au_firmware

qualcomm/ar8031_firmware

qualcomm/csr6030_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/mdm8215_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9215_firmware

qualcomm/mdm9250_firmware

... and 35 more

Timeline

Published Oct 20, 2021

Tracked Since Feb 18, 2026