PT-2020-12583 · Qualcomm · Snapdragon Connectivity+19
Published
2020-11-02
·
Updated
2021-07-21
·
CVE-2020-11169
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon versions (affected versions not specified)
Description
The issue is related to a buffer over-read that occurs while processing received L2CAP packets due to the lack of an integer overflow check. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking, in specific chipsets such as APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Apq8009
Apq8053
Qca6390
Qcn7605
Qcn7606
Sa415M
Sa515M
Sa6155P
Sa8155P
Sc8180X
Sdx55
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Electronics Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wired Infrastructure/Networking