PT-2020-12556 · Qualcomm · Snapdragon Compute+1

Published 2020-11-02 · Updated 2020-11-09 · CVE-2020-11114

Mitre

CVSS v2.0

5.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link Layer packet(Equivalent to CVE-2019-17060,CVE-2019-17061 and CVE-2019-17517 in Sweyntooth paper)' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in AR9344

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-11114

Affected Products

Snapdragon Compute

Ar9344 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-11114 · Security Note
• https://qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin · Vendor Advisory
• https://qualcomm.com/company/product-security/bulletins/october-2020-bulletin · Note