CVE-2020-11268

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: May 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-112698.8Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdra CVE-2020-112707.5Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter CVE-2020-112717.8Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2020-112729.8Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can CVE-2020-112737.5Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when his CVE-2020-112747.5Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd CVE-2020-112759.1Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto CVE-2020-112769.1Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE CVE-2020-112777.4Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snap CVE-2020-112787.5Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con CVE-2020-112799.8Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon CVE-2020-112807.5Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improp