What’s Vulnerable › Vulnerabilities

CVE-2020-11157

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-02 · updated 2026-06-17

Description

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632

Affected products

• Qualcomm Apq8053 Firmware: all versions
• Qualcomm Apq8076 Firmware: all versions
• Qualcomm Mdm9640 Firmware: all versions
• Qualcomm Mdm9650 Firmware: all versions
• Qualcomm Msm8905 Firmware: all versions
• Qualcomm Msm8917 Firmware: all versions
• Qualcomm Msm8937 Firmware: all versions
• Qualcomm Msm8940 Firmware: all versions
• Qualcomm Msm8953 Firmware: all versions
• Qualcomm Qca6174A Firmware: all versions
• Qualcomm Qca9886 Firmware: all versions
• Qualcomm Qcm2150 Firmware: all versions
• Qualcomm Qm215 Firmware: all versions
• Qualcomm Sdm429 Firmware: all versions
• Qualcomm Sdm439 Firmware: all versions
• Qualcomm Sdm450 Firmware: all versions
• Qualcomm Sdm632 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Get alerted when CVE-2020-11157 or the next vulnerability affects your stack