NetSight
high8.1

CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon…

Impact

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in QCA6390, QCN7605, QCS404, SA415M, SA515M, SC8180X, SDX55, SM8250

Affected products

VendorProductAffected versions
QualcommQca6390 Firmware
All versions
QualcommQcn7605 Firmware
All versions
QualcommQcs404 Firmware
All versions
QualcommSa415m Firmware
All versions
QualcommSa515m Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm8250 Firmware
All versions

Weakness classification

References