What’s Vulnerable › Vulnerabilities

CVE-2020-11185

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-787

Description

Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected products

• Qualcomm Ar9380: all versions
• Qualcomm Csr8811: all versions
• Qualcomm Ipq4018: all versions
• Qualcomm Ipq4019: all versions
• Qualcomm Ipq4028: all versions
• Qualcomm Ipq4029: all versions
• Qualcomm Ipq6000: all versions
• Qualcomm Ipq6005: all versions
• Qualcomm Ipq6010: all versions
• Qualcomm Ipq6018: all versions
• Qualcomm Ipq6028: all versions
• Qualcomm Ipq8064: all versions
• Qualcomm Ipq8065: all versions
• Qualcomm Ipq8068: all versions
• Qualcomm Ipq8070: all versions
• Qualcomm Ipq8070A: all versions
• Qualcomm Ipq8071: all versions
• Qualcomm Ipq8071A: all versions
• Qualcomm Ipq8072: all versions
• Qualcomm Ipq8072A: all versions
• Qualcomm Ipq8074: all versions
• Qualcomm Ipq8074A: all versions
• Qualcomm Ipq8076: all versions
• Qualcomm Ipq8076A: all versions
• Qualcomm Ipq8078: all versions
• Qualcomm Ipq8078A: all versions
• Qualcomm Ipq8173: all versions
• Qualcomm Ipq8174: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm7350C: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

Get alerted when CVE-2020-11185 or the next vulnerability affects your stack