CVE-2020-11159

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-11165.5An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects inCVE-2020-111606.7Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in SnapdragCVE-2020-111617.1Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon ACVE-2020-111627.8u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in SnapdragoCVE-2020-111639.8Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the eCVE-2020-111647.8u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in SnapdragoCVE-2020-111657.8Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in SCVE-2020-111669.1Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in SnapdragoCVE-2020-111679.8Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, SnCVE-2020-111689.8u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in SnapdrCVE-2020-111699.1u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, SnaCVE-2020-11178.8A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. An attacker