VULNERABILITY INTELLIGENCE
CVE-2020-11117
CVSS score9.8 CRITICAL
EPSS probability19.68%
CISA KEVNot currently listed
Published2020-09-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980
Weakness classification
- nvd@nist.gov: CWE-77
Primary references
- product-security@qualcomm.com — Broken Link
- product-security@qualcomm.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory