NetSight
high8.8

CVE-2020-11269

Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdr…

Impact

Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8009w Firmware
All versions
QualcommApq8016 Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8037 Firmware
All versions
QualcommApq8039 Firmware
All versions
QualcommApq8052 Firmware
All versions
QualcommApq8053 Firmware
All versions
QualcommApq8056 Firmware
All versions
QualcommApq8064au Firmware
All versions
QualcommApq8076 Firmware
All versions
QualcommApq8084 Firmware
All versions

Weakness classification

References