VULNERABILITY INTELLIGENCE

CVE-2020-11279

CVSS score7.5 HIGH
EPSS probability0.82%
CISA KEVNot currently listed
Published2021-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references