VULNERABILITY INTELLIGENCE

CVE-2020-11255

CVSS score7.5 HIGH
EPSS probability0.71%
CISA KEVNot currently listed
Published2021-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

Weakness classification

  • nvd@nist.gov: CWE-401

Primary references