NetSight
critical9.8

CVE-2020-11163

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapd…

Impact

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffected versions
QualcommApq8017 Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommPm215 Firmware
All versions
QualcommPm3003a Firmware
All versions
QualcommPm4125 Firmware
All versions
QualcommPm4250 Firmware
All versions
QualcommPm439 Firmware
All versions
QualcommPm456 Firmware
All versions
QualcommPm6125 Firmware
All versions

Weakness classification

References