PT-2021-9180 · Qualcomm · Qualcomm Snapdragon

Published 2021-06-09 · Updated 2021-06-15 · CVE-2020-11134

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon (affected versions not specified)

Description A potential stack out of bounds write issue may occur due to improper validation of the time bitmap length and bit duration fields in attributes like the NAN ranging setup attribute within a NAN management frame. This issue affects various Qualcomm Snapdragon products, including Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wired Infrastructure and Networking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Memory Corruption

Weakness Enumeration

CWE-129

CWE-787

Related Identifiers

CVE-2020-11134

Affected Products

Qualcomm Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/january-2021-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11134 · Security Note
• https://t.me/cvenotify/15940 · Telegram Post