CVE-2020-11116

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QCS610, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Sep 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111179.8u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resul CVE-2020-111187.5u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, S CVE-2020-111197.5Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, CVE-2020-11128.5An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles CVE-2020-111207.8u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buff CVE-2020-111217.8u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Sna CVE-2020-111225.5u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, S CVE-2020-111235.5u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`CVE-2020-111247.8u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdra CVE-2020-111257.8u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Au CVE-2020-111269.1Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, CVE-2020-111277.8u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of secu