CVE-2020-11156

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in QCA6390, QCN7605, QCS404, SA415M, SA515M, SC8180X, SDX55, SM8250

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-20 CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Nov 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-111577.5u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in S CVE-2020-111587.5u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS P CVE-2020-111599.1Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer bein CVE-2020-11165.5An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in CVE-2020-111606.7Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdrag CVE-2020-111617.1Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon A CVE-2020-111627.8u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdrago CVE-2020-111639.8Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the e CVE-2020-111647.8u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdrago CVE-2020-111657.8Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in S CVE-2020-111669.1Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdrago CVE-2020-111679.8Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Sn