What’s Vulnerable › Vulnerabilities

CVE-2020-11144

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-20

Description

Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm Apq8009: all versions
• Qualcomm Apq8009W: all versions
• Qualcomm Apq8017: all versions
• Qualcomm Apq8037: all versions
• Qualcomm Apq8053: all versions
• Qualcomm Apq8084: all versions
• Qualcomm Apq8096Au: all versions
• Qualcomm Aqt1000: all versions
• Qualcomm Ar6003: all versions
• Qualcomm Ar8035: all versions
• Qualcomm Ar8151: all versions
• Qualcomm Csr6030: all versions
• Qualcomm Csrb31024: all versions
• Qualcomm Fsm10055: all versions
• Qualcomm Mdm8207: all versions
• Qualcomm Mdm8215: all versions
• Qualcomm Mdm8215M: all versions
• Qualcomm Mdm8615M: all versions
• Qualcomm Mdm9150: all versions
• Qualcomm Mdm9205: all versions
• Qualcomm Mdm9206: all versions
• Qualcomm Mdm9207: all versions
• Qualcomm Mdm9215: all versions
• Qualcomm Mdm9230: all versions
• Qualcomm Mdm9250: all versions
• Qualcomm Mdm9310: all versions
• Qualcomm Mdm9330: all versions
• Qualcomm Mdm9607: all versions
• Qualcomm Mdm9615: all versions
• Qualcomm Mdm9615M: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11144 or the next vulnerability affects your stack