CVE-2020-11167

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111689.8u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in SnapdrCVE-2020-111699.1u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, SnaCVE-2020-11178.8A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. An attacker CVE-2020-111709.8Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in SnapdragCVE-2020-111719.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111729.8u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in SnapdraCVE-2020-111737.0u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, SCVE-2020-111747.8u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, SnapdragonCVE-2020-111757.8u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to impropCVE-2020-111769.8While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow whichCVE-2020-111778.8User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in SnapdCVE-2020-111787.8Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its