What’s Vulnerable › Vulnerabilities

CVE-2020-11169

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-02 · updated 2026-06-17
• Weakness: CWE-125

Description

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

Affected products

• Qualcomm Apq8009 Firmware: all versions
• Qualcomm Apq8053 Firmware: all versions
• Qualcomm Qca6390 Firmware: all versions
• Qualcomm Qcn7605 Firmware: all versions
• Qualcomm Qcn7606 Firmware: all versions
• Qualcomm Sa415M Firmware: all versions
• Qualcomm Sa515M Firmware: all versions
• Qualcomm Sa6155P Firmware: all versions
• Qualcomm Sa8155P Firmware: all versions
• Qualcomm Sc8180X Firmware: all versions
• Qualcomm Sdx55 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Get alerted when CVE-2020-11169 or the next vulnerability affects your stack