What’s Vulnerable › Vulnerabilities

CVE-2020-11268

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-07 · updated 2026-06-17
• Weakness: CWE-20

Description

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile

Affected products

• Qualcomm Apq8009: all versions
• Qualcomm Apq8016: all versions
• Qualcomm Apq8074: all versions
• Qualcomm Apq8084: all versions
• Qualcomm Apq8094: all versions
• Qualcomm Ar6003: all versions
• Qualcomm Mdm8215: all versions
• Qualcomm Mdm8215M: all versions
• Qualcomm Mdm8615M: all versions
• Qualcomm Mdm9215: all versions
• Qualcomm Mdm9235M: all versions
• Qualcomm Mdm9310: all versions
• Qualcomm Mdm9609: all versions
• Qualcomm Mdm9615: all versions
• Qualcomm Mdm9615M: all versions
• Qualcomm Mdm9635M: all versions
• Qualcomm Mdm9640: all versions
• Qualcomm Mdm9645: all versions
• Qualcomm Msm8108: all versions
• Qualcomm Msm8208: all versions
• Qualcomm Msm8209: all versions
• Qualcomm Msm8216: all versions
• Qualcomm Msm8274: all versions
• Qualcomm Msm8608: all versions
• Qualcomm Msm8674: all versions
• Qualcomm Msm8916: all versions
• Qualcomm Msm8929: all versions
• Qualcomm Msm8939: all versions
• Qualcomm Msm8974: all versions
• Qualcomm Msm8974P: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

Get alerted when CVE-2020-11268 or the next vulnerability affects your stack