PT-2021-9299 · Qualcomm · Snapdragon Iot+6
Published
2021-06-09
·
Updated
2021-06-15
·
CVE-2020-11291
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Snapdragon Auto (affected versions not specified)
Snapdragon Compute (affected versions not specified)
Snapdragon Connectivity (affected versions not specified)
Snapdragon Consumer IOT (affected versions not specified)
Snapdragon Industrial IOT (affected versions not specified)
Snapdragon IoT (affected versions not specified)
Snapdragon Mobile (affected versions not specified)
Description
The issue is related to a possible buffer overflow that occurs while updating ikev2 parameters for delete payloads received during informational exchange. This happens due to a lack of input validation for certain parameters received from the ePDG server.
Recommendations
For Snapdragon Auto, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon Compute, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon Connectivity, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon Consumer IOT, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon Industrial IOT, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon IoT, update to a version that includes input validation checks for parameters received from the ePDG server.
For Snapdragon Mobile, update to a version that includes input validation checks for parameters received from the ePDG server.
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Iot
Snapdragon Mobile