CVE-2020-11169
Last modified
CVE-2020-11169 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8009 Firmware | All versions |
| Qualcomm | Apq8053 Firmware | All versions |
| Qualcomm | Qca6390 Firmware | All versions |
| Qualcomm | Qcn7605 Firmware | All versions |
| Qualcomm | Qcn7606 Firmware | All versions |
| Qualcomm | Sa415m Firmware | All versions |
| Qualcomm | Sa515m Firmware | All versions |
| Qualcomm | Sa6155p Firmware | All versions |
| Qualcomm | Sa8155p Firmware | All versions |
| Qualcomm | Sc8180x Firmware | All versions |
| Qualcomm | Sdx55 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-11169?
How severe is CVE-2020-11169?
How do I fix CVE-2020-11169?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-11163Possible buffer overflow while updating ikev2 parameters due…9.8
- CVE-2020-11164u'Third-party app may also call the broadcasts in Perfdump a…7.8
- CVE-2020-11165Memory corruption due to buffer overflow while copying the m…7.8
- CVE-2020-11166Potential out of bound read exception when UE receives unusu…9.1
- CVE-2020-11167Memory corruption while calculating L2CAP packet length in r…9.8
- CVE-2020-11168u'Null-pointer dereference can occur while accessing data bu…9.8
- CVE-2020-1117A remote code execution vulnerability exists in the way that…8.8
- CVE-2020-11170Out of bound memory access while playing music playbacks wit…9.8
- CVE-2020-11171Buffer over-read can happen while parsing received SDP value…9.1
- CVE-2020-11172u'fscanf reads a string from a file and stores its contents …9.8
- CVE-2020-11173u'Two threads running simultaneously from user space can lea…7
- CVE-2020-11174u'Array index underflow issue in adsp driver due to improper…7.8
Are you affected by CVE-2020-11169?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST