What’s Vulnerable › Vulnerabilities

CVE-2020-11287

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-22 · updated 2026-06-17
• Weakness: CWE-203

Description

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

• Qualcomm Aqt1000: all versions
• Qualcomm Ar8031: all versions
• Qualcomm Ar8035: all versions
• Qualcomm Csr8811: all versions
• Qualcomm Csra6620: all versions
• Qualcomm Csra6640: all versions
• Qualcomm Csrb31024: all versions
• Qualcomm Ipq6000: all versions
• Qualcomm Ipq6010: all versions
• Qualcomm Ipq6018: all versions
• Qualcomm Ipq6028: all versions
• Qualcomm Ipq8070: all versions
• Qualcomm Ipq8070A: all versions
• Qualcomm Ipq8071: all versions
• Qualcomm Ipq8071A: all versions
• Qualcomm Ipq8072: all versions
• Qualcomm Ipq8072A: all versions
• Qualcomm Ipq8074: all versions
• Qualcomm Ipq8074A: all versions
• Qualcomm Ipq8076: all versions
• Qualcomm Ipq8076A: all versions
• Qualcomm Ipq8078: all versions
• Qualcomm Ipq8078A: all versions
• Qualcomm Ipq8173: all versions
• Qualcomm Ipq8174: all versions
• Qualcomm Pm3003A: all versions
• Qualcomm Pm4125: all versions
• Qualcomm Pm4250: all versions
• Qualcomm Pm456: all versions
• Qualcomm Pm6125: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin

Get alerted when CVE-2020-11287 or the next vulnerability affects your stack