VULNERABILITY INTELLIGENCE
CVE-2020-11167
CVSS score9.8 CRITICAL
EPSS probability1.23%
CISA KEVNot currently listed
Published2021-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Weakness classification
- nvd@nist.gov: CWE-190
Primary references
- product-security@qualcomm.com — Broken Link
- nvd@nist.gov — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link