High severity · published Jan 21, 2021
CVE-2020-11185
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Ar9380 · Qualcomm
All versions, or not specified · source: NVD
CS
Csr8811 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq4018 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq4019 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq4028 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq4029 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq6000 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq6005 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq6010 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq6018 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq6028 · Qualcomm
All versions, or not specified · source: NVD
IP
Ipq8064 · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11185
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
Patch
https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
More from Ar9380
9.8
CVE-2020-11225
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
9.8
CVE-2020-11213
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon…
9.8
CVE-2020-11212
Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
9.1
CVE-2020-11215
An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…