NetSight
high8.4

CVE-2020-11267

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute,…

Impact

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8009w Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8064au Firmware
All versions
QualcommApq8076 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr7420 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommAr9380 Firmware
All versions

Weakness classification

References