First published: Mon Jun 07 2021(Updated: )
While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm apq8017 firmware | ||
Qualcomm apq8017 | ||
Qualcomm APQ8053 Firmware | ||
Qualcomm APQ8053 Firmware | ||
Qualcomm aqt1000 firmware | ||
Qualcomm aqt1000 | ||
Qualcomm ar8035 firmware | ||
Qualcomm ar8035 | ||
Qualcomm csrb31024 firmware | ||
Qualcomm csrb31024 | ||
Qualcomm msm8917 firmware | ||
Qualcomm msm8917 | ||
qualcomm MSM8920 firmware | ||
qualcomm MSM8920 | ||
qualcomm MSM8940 firmware | ||
qualcomm MSM8940 | ||
Qualcomm msm8953 firmware | ||
Qualcomm msm8953 | ||
Qualcomm 8976 Firmware | ||
Qualcomm 8976 | ||
qualcomm msm8976sg firmware | ||
Qualcomm 8976 | ||
Qualcomm qca6174a firmware | ||
Qualcomm qca6174a | ||
Qualcomm qca6390 firmware | ||
Qualcomm qca6390 | ||
qualcomm qca6391 firmware | ||
qualcomm qca6391 | ||
Qualcomm qca6420 firmware | ||
Qualcomm qca6420 | ||
qualcomm qca6421 firmware | ||
qualcomm qca6421 | ||
qualcomm qca6426 firmware | ||
qualcomm qca6426 | ||
Qualcomm qca6430 firmware | ||
Qualcomm qca6430 | ||
qualcomm qca6431 firmware | ||
qualcomm qca6431 | ||
qualcomm qca6436 firmware | ||
qualcomm qca6436 | ||
qualcomm qca6564au firmware | ||
qualcomm qca6564au | ||
qualcomm qca6574a firmware | ||
qualcomm qca6574a | ||
qualcomm qca6574au firmware | ||
qualcomm qca6574au | ||
qualcomm QCA6584AU firmware | ||
qualcomm QCA6584AU | ||
qualcomm qca6595au firmware | ||
qualcomm qca6595au | ||
qualcomm qca6696 firmware | ||
qualcomm qca6696 | ||
qualcomm qca8337 firmware | ||
qualcomm qca8337 | ||
Qualcomm qca9377 firmware | ||
Qualcomm qca9377 | ||
qualcomm qca9379 firmware | ||
qualcomm qca9379 | ||
Qualcomm qcm4290 firmware | ||
Qualcomm qcm4290 | ||
Qualcomm qcm6125 firmware | ||
Qualcomm qcm6125 | ||
qualcomm qcs410 firmware | ||
qualcomm qcs410 | ||
Qualcomm qcs4290 firmware | ||
Qualcomm qcs4290 | ||
qualcomm qcs610 firmware | ||
qualcomm qcs610 | ||
Qualcomm qcs6125 firmware | ||
Qualcomm qcs6125 | ||
Qualcomm sa415m firmware | ||
Qualcomm sa415m | ||
Qualcomm sa515m firmware | ||
Qualcomm sa515m | ||
Qualcomm sa8155 firmware | ||
Qualcomm sa8155 | ||
Qualcomm sa8155p firmware | ||
Qualcomm sa8155p | ||
qualcomm SC8180X firmware | ||
qualcomm SC8180X | ||
qualcomm SD 675 firmware | ||
qualcomm SD 675 | ||
qualcomm sd 8c firmware | ||
qualcomm sd 8c | ||
qualcomm SD 8CX firmware | ||
qualcomm SD 8CX | ||
Qualcomm sd450 firmware | ||
Qualcomm sd450 | ||
Qualcomm SD 480 Firmware | ||
Qualcomm Snapdragon 480 | ||
Qualcomm sd665 firmware | ||
Qualcomm sd665 | ||
qualcomm sd670 firmware | ||
qualcomm sd670 | ||
qualcomm sd675 firmware | ||
qualcomm sd675 | ||
Qualcomm sd678 firmware | ||
Qualcomm sd678 | ||
qualcomm sd690 5g firmware | ||
qualcomm sd690 5g | ||
Qualcomm sd720g firmware | ||
Qualcomm sd720g | ||
Qualcomm sd730 firmware | ||
Qualcomm Sd730 | ||
Qualcomm sd750g firmware | ||
Qualcomm sd750g | ||
Qualcomm sd765 firmware | ||
Qualcomm sd765 | ||
Qualcomm sd765g firmware | ||
Qualcomm sd765g | ||
Qualcomm sd768g firmware | ||
Qualcomm sd768g | ||
Qualcomm sd845 firmware | ||
Qualcomm sd845 | ||
qualcomm sd855 firmware | ||
qualcomm sd855 | ||
qualcomm sd865 5g firmware | ||
qualcomm sd865 5g | ||
Qualcomm sd870 firmware | ||
Qualcomm sd870 | ||
qualcomm sd888 5g firmware | ||
qualcomm sd888 5g | ||
Qualcomm sdx24 firmware | ||
Qualcomm sdx24 | ||
Qualcomm sdx50m firmware | ||
Qualcomm sdx50m | ||
Qualcomm sdx55 firmware | ||
Qualcomm sdx55 | ||
Qualcomm sdx55m firmware | ||
Qualcomm sdx55m | ||
qualcomm sdxr2 5g firmware | ||
qualcomm sdxr2 5g | ||
Qualcomm sm6250 firmware | ||
Qualcomm sm6250 | ||
Qualcomm sm6250p firmware | ||
Qualcomm sm6250p | ||
qualcomm sm7250p firmware | ||
qualcomm sm7250p | ||
Qualcomm wcd9326 firmware | ||
Qualcomm wcd9326 | ||
Qualcomm wcd9335 firmware | ||
qualcomm wcd9335 | ||
qualcomm wcd9340 firmware | ||
qualcomm wcd9340 | ||
qualcomm wcd9341 firmware | ||
qualcomm wcd9341 | ||
Qualcomm wcd9360 firmware | ||
Qualcomm wcd9360 | ||
Qualcomm wcd9370 firmware | ||
Qualcomm wcd9370 | ||
Qualcomm wcd9371 firmware | ||
Qualcomm wcd9371 | ||
Qualcomm wcd9375 firmware | ||
Qualcomm wcd9375 | ||
qualcomm wcd9380 firmware | ||
qualcomm wcd9380 | ||
qualcomm wcd9385 firmware | ||
qualcomm wcd9385 | ||
Qualcomm wcn3615 firmware | ||
Qualcomm wcn3615 | ||
Qualcomm wcn3660b firmware | ||
Qualcomm wcn3660b | ||
Qualcomm wcn3680b firmware | ||
Qualcomm wcn3680b | ||
Qualcomm wcn3910 firmware | ||
Qualcomm wcn3910 | ||
Qualcomm WCN3950 Firmware | ||
qualcomm wcn3950 | ||
qualcomm wcn3980 firmware | ||
Qualcomm Wcn3980 | ||
qualcomm wcn3988 firmware | ||
Qualcomm WCN3988 | ||
qualcomm wcn3990 firmware | ||
qualcomm wcn3990 | ||
Qualcomm WCN3991 Firmware | ||
Qualcomm WCN3991 Firmware | ||
Qualcomm wcn3998 firmware | ||
Qualcomm wcn3998 | ||
qualcomm wcn6750 firmware | ||
qualcomm wcn6750 | ||
Qualcomm WCN6850 Firmware | ||
Qualcomm WCN6850 Firmware | ||
Qualcomm WCN6851 Firmware | ||
Qualcomm WCN6851 Firmware | ||
Qualcomm wcn6855 firmware | ||
qualcomm wcn6855 | ||
Qualcomm wcn6856 firmware | ||
qualcomm wcn6856 | ||
qualcomm whs9410 firmware | ||
qualcomm whs9410 | ||
qualcomm wsa8810 firmware | ||
qualcomm wsa8810 | ||
qualcomm wsa8815 firmware | ||
qualcomm wsa8815 | ||
qualcomm wsa8830 firmware | ||
qualcomm wsa8830 | ||
qualcomm wsa8835 firmware | ||
qualcomm wsa8835 | ||
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-11176 has a high severity rating due to the potential for memory corruption and subsequent exploitation.
To fix CVE-2020-11176, apply the latest security patch provided by your device manufacturer that addresses this vulnerability.
CVE-2020-11176 affects various Qualcomm firmware and devices running Android, including Snapdragon Auto and Snapdragon Compute.
Exploiting CVE-2020-11176 could lead to arbitrary code execution, causing systems to become unstable or compromised.
Currently, there are no effective workarounds for CVE-2020-11176, so updating to the patched version is essential.