Strix
26.1K

CVE-2020-11185

HIGHCVSS 7.8/10EPSS 0.22%

Last modified

CVE-2020-11185 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.22%

12.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QualcommAr9380All versions
QualcommCsr8811All versions
QualcommIpq4018All versions
QualcommIpq4019All versions
QualcommIpq4028All versions
QualcommIpq4029All versions
QualcommIpq6000All versions
QualcommIpq6005All versions
QualcommIpq6010All versions
QualcommIpq6018All versions
QualcommIpq6028All versions
QualcommIpq8064All versions
QualcommIpq8065All versions
QualcommIpq8068All versions
QualcommIpq8070All versions
QualcommIpq8070aAll versions
QualcommIpq8071All versions
QualcommIpq8071aAll versions
QualcommIpq8072All versions
QualcommIpq8072aAll versions
QualcommIpq8074All versions
QualcommIpq8074aAll versions
QualcommIpq8076All versions
QualcommIpq8076aAll versions
QualcommIpq8078All versions
QualcommIpq8078aAll versions
QualcommIpq8173All versions
QualcommIpq8174All versions
QualcommPm3003aAll versions
QualcommPm7350cAll versions
QualcommPm8008All versions
QualcommPm8009All versions
QualcommPm8350All versions
QualcommPm8350bAll versions
QualcommPm8350bhAll versions
QualcommPm8350bhsAll versions
QualcommPm8350cAll versions
QualcommPmk7350All versions
QualcommPmk8002All versions
QualcommPmk8350All versions
QualcommPmm6155auAll versions
QualcommPmm8155auAll versions
QualcommPmm8195auAll versions
QualcommPmm855auAll versions
QualcommPmr525All versions
QualcommPmr735aAll versions
QualcommPmr735bAll versions
QualcommPmx55All versions
QualcommQat3514All versions
QualcommQat3516All versions

Showing 50 of 195 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-11185?
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
How severe is CVE-2020-11185?
CVE-2020-11185 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2020-11185?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-11185?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST