CVE-2020-11153: qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile Out-of-bounds Write
Vulnerability summary
CVE-2020-11153 is a high (CVSS 10.0) Out-of-bounds Write vulnerability in qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile. EPSS estimates a 2.28% chance of exploitation in the next 30 days, higher than 82.9% of scored vulnerabilities.
Timeline
- 02-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.28%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.28% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Qualcomm6 products
Qualcomm, inc.1 product
- snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobileAPQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55
2 vendors · 7 products
References
2 links- www.qualcomm.com/company/product-security/bulletins/october-2020-bulletinX Refsource CONFIRMBroken Link