VULNERABILITY INTELLIGENCE

CVE-2020-11285

CVSS score8.2 HIGH
EPSS probability0.91%
CISA KEVNot currently listed
Published2021-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Description

Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Weakness classification

  • CWE-125: Out-of-bounds Read

Primary references