CVE-2020-11153: Critical severity qualcomm apq8053 vulnerability

Published Nov 2, 2020

Updated

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55

Affected Software

12 affected components

QUALCOMM Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Qualcomm Qca9379 Firmware

Qualcomm QCA9379

Qualcomm Qcn7605 Firmware

Qualcomm Qcn7605

Qualcomm Sc8180x Firmware

Qualcomm Sc8180x

Qualcomm Sdx55 Firmware

Qualcomm Sdx55

Event History

Nov 2, 2020

CVE Published

via MITRE·06:21 AM

Data Sourced

via MITRE·06:21 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-11153?

The severity of CVE-2020-11153 is critical with a CVSS score of 9.8.

How does CVE-2020-11153 impact Snapdragon Auto?

CVE-2020-11153 may lead to remote code execution in Snapdragon Auto.

Is Qualcomm Sc8180x vulnerable to CVE-2020-11153?

No, Qualcomm Sc8180x is not vulnerable to CVE-2020-11153.

How can I fix CVE-2020-11153?

To fix CVE-2020-11153, apply the necessary firmware updates provided by Qualcomm or follow the recommendations in the security bulletin.

Where can I find more information about CVE-2020-11153?

You can find more information about CVE-2020-11153 in the October 2020 security bulletin issued by Qualcomm.