CVE-2020-11144: Input Validation
First published: Mon Dec 07 2020(Updated: )
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Apq8009 | ||
| Qualcomm Apq8009w | ||
| Qualcomm Apq8017 | ||
| Qualcomm Apq8037 | ||
| Qualcomm Apq8053 | ||
| Qualcomm Apq8084 | ||
| Qualcomm Apq8096au | ||
| Qualcomm Aqt1000 | ||
| Google Android | ||
| Qualcomm Ar8035 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Csrb31024 | ||
| Qualcomm Fsm10055 | ||
| Qualcomm Mdm8207 | ||
| Qualcomm Mdm8215 | ||
| Qualcomm Mdm8215m | ||
| Qualcomm Mdm8615m | ||
| Qualcomm Mdm9150 | ||
| Qualcomm Mdm9205 | ||
| Qualcomm Mdm9206 | ||
| Qualcomm Mdm9207 | ||
| Qualcomm Mdm9215 | ||
| Qualcomm Mdm9230 | ||
| Qualcomm Mdm9250 | ||
| Qualcomm Mdm9310 | ||
| Qualcomm Mdm9330 | ||
| Qualcomm Mdm9607 | ||
| Qualcomm Mdm9615 | ||
| Qualcomm Mdm9615m | ||
| Google Android | ||
| Qualcomm Mdm9628 | ||
| Qualcomm Mdm9630 | ||
| Qualcomm Mdm9635m | ||
| Qualcomm Mdm9640 | ||
| Qualcomm Mdm9645 | ||
| Qualcomm Mdm9650 | ||
| Qualcomm Mdm9655 | ||
| Qualcomm Msm8108 | ||
| Qualcomm Msm8208 | ||
| Qualcomm Msm8209 | ||
| Qualcomm Msm8608 | ||
| Qualcomm Msm8909w | ||
| Qualcomm Msm8917 | ||
| Qualcomm Msm8920 | ||
| Qualcomm Msm8937 | ||
| Qualcomm Msm8940 | ||
| Qualcomm Msm8953 | ||
| Qualcomm Msm8976 | ||
| Qualcomm Msm8976sg | ||
| Qualcomm Msm8996au | ||
| Google Android | ||
| Qualcomm Pm3003a | ||
| Google Android | ||
| Qualcomm Pm439 | ||
| Google Android | ||
| Qualcomm Pm6125 | ||
| Google Android | ||
| Qualcomm Pm6150a | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pm660l | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pm8004 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pm8009 | ||
| Qualcomm Pm8018 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pm855l | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pm8953 | ||
| Google Android | ||
| Qualcomm Pm8996 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pmd9635 | ||
| Google Android | ||
| Qualcomm Pmd9655 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pmi8940 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pmi8996 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pmm855au | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Pmr735a | ||
| Qualcomm Pmw3100 | ||
| Qualcomm Pmx20 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qat3550 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qbt1000 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca4004 | ||
| Google Android | ||
| Qualcomm Qca6174 | ||
| Qualcomm Qca6174a | ||
| Qualcomm Qca6310 | ||
| Qualcomm Qca6320 | ||
| Qualcomm Qca6335 | ||
| Qualcomm Qca6390 | ||
| Qualcomm Qca6391 | ||
| Qualcomm Qca6420 | ||
| Qualcomm Qca6421 | ||
| Qualcomm Qca6426 | ||
| Qualcomm Qca6430 | ||
| Qualcomm Qca6431 | ||
| Qualcomm Qca6436 | ||
| Qualcomm Qca6564a | ||
| Google Android | ||
| Qualcomm Qca6574 | ||
| Qualcomm Qca6574a | ||
| Qualcomm Qca6574au | ||
| Qualcomm Qca6584 | ||
| Qualcomm Qca6584au | ||
| Qualcomm Qca6595 | ||
| Qualcomm Qca6595au | ||
| Qualcomm Qca6694 | ||
| Qualcomm Qca6694au | ||
| Qualcomm Qca6696 | ||
| Qualcomm Qca8337 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qcc112 | ||
| Qualcomm Qcm2290 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qcs603 | ||
| Qualcomm Qcs605 | ||
| Google Android | ||
| Qualcomm Qcs6125 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qdm3301 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qdm5677 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qet4101 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qfe1040 | ||
| Google Android | ||
| Qualcomm Qfe1100 | ||
| Google Android | ||
| Qualcomm Qfe2081fc | ||
| Google Android | ||
| Qualcomm Qfe2101 | ||
| Qualcomm Qfe2340 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qfe3320 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qfe4302 | ||
| Qualcomm Qfe4303 | ||
| Google Android | ||
| Qualcomm Qfe4308 | ||
| Qualcomm Qfe4309 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qfe4455fc | ||
| Qualcomm Qfe4465fc | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qln1036aq | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qpa4340 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qpm2630 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qpm8830 | ||
| Google Android | ||
| Qualcomm Qpm8895 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qtc800h | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa415m | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sa8155p | ||
| Qualcomm Sc8180x\+sdx55 | ||
| Qualcomm Sd205 | ||
| Qualcomm Sd210 | ||
| Google Android | ||
| Qualcomm Sd439 | ||
| Qualcomm Sd450 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sd632 | ||
| Qualcomm Sd636 | ||
| Qualcomm Sd660 | ||
| Google Android | ||
| Qualcomm Sd665 | ||
| Google Android | ||
| Qualcomm Sd675 | ||
| Google Android | ||
| Qualcomm Sd712 | ||
| Google Android | ||
| Qualcomm Sd730 | ||
| Google Android | ||
| Qualcomm Sd765g | ||
| Qualcomm Sd768g | ||
| Qualcomm Sd820 | ||
| Qualcomm Sd821 | ||
| Qualcomm Sd835 | ||
| Qualcomm Sd845 | ||
| Qualcomm Sd850 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sdm429w | ||
| Qualcomm Sdm630 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sdw2500 | ||
| Google Android | ||
| Qualcomm Sdx20 | ||
| Google Android | ||
| Qualcomm Sdx50m | ||
| Qualcomm Sdx55 | ||
| Google Android | ||
| Qualcomm Sdxr1 | ||
| Google Android | ||
| Qualcomm Sm4125 | ||
| Google Android | ||
| Qualcomm Sm6250p | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Smb1358 | ||
| Qualcomm Smb1360 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Smb358 | ||
| Qualcomm Smb358s | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9330 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcd9371 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn3620 | ||
| Qualcomm Wcn3660 | ||
| Google Android | ||
| Qualcomm Wcn3680 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wcn3991 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wtr1605l | ||
| Google Android | ||
| Qualcomm Wtr2955 | ||
| Qualcomm Wtr2965 | ||
| Google Android | ||
| Qualcomm Wtr3925 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Wtr5975 | ||
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://source.android.com/docs/security/bulletin/2020-12-01/#asterisk
- https://source.android.com/docs/security/bulletin/2020-12-01 (Advisory)
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin
- https://www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/last-modified-date
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google android
- vendor/qualcomm
- canonical/qualcomm apq8009
- canonical/qualcomm apq8009w
- canonical/qualcomm apq8017
- canonical/qualcomm apq8037
- canonical/qualcomm apq8053
- canonical/qualcomm apq8084
- canonical/qualcomm apq8096au
- canonical/qualcomm aqt1000
- canonical/qualcomm ar8035
- canonical/qualcomm csrb31024
- canonical/qualcomm fsm10055
- canonical/qualcomm mdm8207
- canonical/qualcomm mdm8215
- canonical/qualcomm mdm8215m
- canonical/qualcomm mdm8615m
- canonical/qualcomm mdm9150
- canonical/qualcomm mdm9205
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9207
- canonical/qualcomm mdm9215
- canonical/qualcomm mdm9230
- canonical/qualcomm mdm9250
- canonical/qualcomm mdm9310
- canonical/qualcomm mdm9330
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9615
- canonical/qualcomm mdm9615m
- canonical/qualcomm mdm9628
- canonical/qualcomm mdm9630
- canonical/qualcomm mdm9635m
- canonical/qualcomm mdm9640
- canonical/qualcomm mdm9645
- canonical/qualcomm mdm9650
- canonical/qualcomm mdm9655
- canonical/qualcomm msm8108
- canonical/qualcomm msm8208
- canonical/qualcomm msm8209
- canonical/qualcomm msm8608
- canonical/qualcomm msm8909w
- canonical/qualcomm msm8917
- canonical/qualcomm msm8920
- canonical/qualcomm msm8937
- canonical/qualcomm msm8940
- canonical/qualcomm msm8953
- canonical/qualcomm msm8976
- canonical/qualcomm msm8976sg
- canonical/qualcomm msm8996au
- canonical/qualcomm pm3003a
- canonical/qualcomm pm439
- canonical/qualcomm pm6125
- canonical/qualcomm pm6150a
- canonical/qualcomm pm660l
- canonical/qualcomm pm8004
- canonical/qualcomm pm8009
- canonical/qualcomm pm8018
- canonical/qualcomm pm855l
- canonical/qualcomm pm8953
- canonical/qualcomm pm8996
- canonical/qualcomm pmd9635
- canonical/qualcomm pmd9655
- canonical/qualcomm pmi8940
- canonical/qualcomm pmi8996
- canonical/qualcomm pmm855au
- canonical/qualcomm pmr735a
- canonical/qualcomm pmw3100
- canonical/qualcomm pmx20
- canonical/qualcomm qat3550
- canonical/qualcomm qbt1000
- canonical/qualcomm qca4004
- canonical/qualcomm qca6174
- canonical/qualcomm qca6174a
- canonical/qualcomm qca6310
- canonical/qualcomm qca6320
- canonical/qualcomm qca6335
- canonical/qualcomm qca6390
- canonical/qualcomm qca6391
- canonical/qualcomm qca6420
- canonical/qualcomm qca6421
- canonical/qualcomm qca6426
- canonical/qualcomm qca6430
- canonical/qualcomm qca6431
- canonical/qualcomm qca6436
- canonical/qualcomm qca6564a
- canonical/qualcomm qca6574
- canonical/qualcomm qca6574a
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6584
- canonical/qualcomm qca6584au
- canonical/qualcomm qca6595
- canonical/qualcomm qca6595au
- canonical/qualcomm qca6694
- canonical/qualcomm qca6694au
- canonical/qualcomm qca6696
- canonical/qualcomm qca8337
- canonical/qualcomm qcc112
- canonical/qualcomm qcm2290
- canonical/qualcomm qcs603
- canonical/qualcomm qcs605
- canonical/qualcomm qcs6125
- canonical/qualcomm qdm3301
- canonical/qualcomm qdm5677
- canonical/qualcomm qet4101
- canonical/qualcomm qfe1040
- canonical/qualcomm qfe1100
- canonical/qualcomm qfe2081fc
- canonical/qualcomm qfe2101
- canonical/qualcomm qfe2340
- canonical/qualcomm qfe3320
- canonical/qualcomm qfe4302
- canonical/qualcomm qfe4303
- canonical/qualcomm qfe4308
- canonical/qualcomm qfe4309
- canonical/qualcomm qfe4455fc
- canonical/qualcomm qfe4465fc
- canonical/qualcomm qln1036aq
- canonical/qualcomm qpa4340
- canonical/qualcomm qpm2630
- canonical/qualcomm qpm8830
- canonical/qualcomm qpm8895
- canonical/qualcomm qtc800h
- canonical/qualcomm sa415m
- canonical/qualcomm sa8155p
- canonical/qualcomm sc8180x\+sdx55
- canonical/qualcomm sd205
- canonical/qualcomm sd210
- canonical/qualcomm sd439
- canonical/qualcomm sd450
- canonical/qualcomm sd632
- canonical/qualcomm sd636
- canonical/qualcomm sd660
- canonical/qualcomm sd665
- canonical/qualcomm sd675
- canonical/qualcomm sd712
- canonical/qualcomm sd730
- canonical/qualcomm sd765g
- canonical/qualcomm sd768g
- canonical/qualcomm sd820
- canonical/qualcomm sd821
- canonical/qualcomm sd835
- canonical/qualcomm sd845
- canonical/qualcomm sd850
- canonical/qualcomm sdm429w
- canonical/qualcomm sdm630
- canonical/qualcomm sdw2500
- canonical/qualcomm sdx20
- canonical/qualcomm sdx50m
- canonical/qualcomm sdx55
- canonical/qualcomm sdxr1
- canonical/qualcomm sm4125
- canonical/qualcomm sm6250p
- canonical/qualcomm smb1358
- canonical/qualcomm smb1360
- canonical/qualcomm smb358
- canonical/qualcomm smb358s
- canonical/qualcomm wcd9330
- canonical/qualcomm wcd9371
- canonical/qualcomm wcn3620
- canonical/qualcomm wcn3660
- canonical/qualcomm wcn3680
- canonical/qualcomm wcn3991
- canonical/qualcomm wtr1605l
- canonical/qualcomm wtr2955
- canonical/qualcomm wtr2965
- canonical/qualcomm wtr3925
- canonical/qualcomm wtr5975