CVE-2020-11185: High severity Google Android vulnerability
Published Dec 7, 2020
·Updated
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Software
196 affected components
Google Android
Qualcomm Ar9380
Qualcomm Csr8811
Qualcomm Ipq4018
Qualcomm IPQ4019
Qualcomm Ipq4028
Qualcomm Ipq4029
Qualcomm Ipq6000
Qualcomm Ipq6005
Qualcomm Ipq6010
Qualcomm IPQ6018
Qualcomm Ipq6028
Qualcomm IPQ8064
Qualcomm Ipq8065
Qualcomm Ipq8068
Qualcomm Ipq8070
Qualcomm Ipq8070a
Qualcomm Ipq8071
Qualcomm Ipq8071a
Qualcomm Ipq8072
Qualcomm Ipq8072a
Qualcomm IPQ8074
Qualcomm Ipq8074a
Qualcomm Ipq8076
Qualcomm Ipq8076a
Qualcomm Ipq8078
Qualcomm Ipq8078a
Qualcomm Ipq8173
Qualcomm Ipq8174
Qualcomm Pm3003a
Qualcomm Pm7350c
Qualcomm Pm8008
Qualcomm Pm8009
Qualcomm Pm8350
Qualcomm Pm8350b
Qualcomm Pm8350bh
Qualcomm Pm8350bhs
Qualcomm Pm8350c
Qualcomm Pmk7350
Qualcomm Pmk8002
Qualcomm Pmk8350
Qualcomm Pmm6155au
Qualcomm Pmm8155au
Qualcomm Pmm8195au
Qualcomm Pmm855au
Qualcomm Pmr525
Qualcomm Pmr735a
Qualcomm Pmr735b
Qualcomm Pmx55
Qualcomm Qat3514
Qualcomm Qat3516
Qualcomm Qat3518
Qualcomm Qat3519
Qualcomm Qat3555
Qualcomm Qat5515
Qualcomm Qat5516
Qualcomm Qat5522
Qualcomm Qat5568
Qualcomm Qca4024
Qualcomm Qca6175a
Qualcomm Qca6390
Qualcomm Qca6391
Qualcomm Qca6428
Qualcomm Qca6438
Qualcomm Qca6564a
Qualcomm Qca6564au
Qualcomm QCA6574
Qualcomm Qca6574a
Qualcomm QCA6574AU
Qualcomm QCA6584AU
Qualcomm Qca6595
Qualcomm Qca6595au
Qualcomm Qca6696
Qualcomm Qca7500
Qualcomm Qca8072
Qualcomm Qca8075
Qualcomm QCA8081
Qualcomm QCA9880
Qualcomm QCA9886
Qualcomm Qca9888
Qualcomm Qca9889
Qualcomm Qca9898
Qualcomm QCA9980
Qualcomm Qca9984
Qualcomm Qca9985
Qualcomm Qca9990
Qualcomm Qca9992
Qualcomm Qca9994
Qualcomm Qcn5021
Qualcomm Qcn5022
Qualcomm Qcn5024
Qualcomm Qcn5052
Qualcomm Qcn5054
Qualcomm Qcn5064
Qualcomm Qcn5121
Qualcomm Qcn5122
Qualcomm Qcn5124
Qualcomm Qcn5152
Qualcomm Qcn5154
Qualcomm Qcn5164
Qualcomm Qcn5550
Qualcomm Qcn7605
Qualcomm Qcn7606
Qualcomm Qcn9000
Qualcomm Qcn9074
Qualcomm Qdm2307
Qualcomm Qdm2308
Qualcomm Qdm2310
Qualcomm Qdm3301
Qualcomm Qdm3302
Qualcomm Qdm4643
Qualcomm Qdm4650
Qualcomm Qdm5579
Qualcomm Qdm5620
Qualcomm Qdm5621
Qualcomm Qdm5670
Qualcomm Qdm5671
Qualcomm Qdm5677
Qualcomm Qdm5679
Qualcomm Qet5100
Qualcomm Qet5100m
Qualcomm Qet6100
Qualcomm Qet6110
Qualcomm Qfs2530
Qualcomm Qfs2580
Qualcomm Qfs2608
Qualcomm Qfs2630
Qualcomm Qln4642
Qualcomm Qln4650
Qualcomm Qln5020
Qualcomm Qln5030
Qualcomm Qln5040
Qualcomm Qpa2625
Qualcomm Qpa5461
Qualcomm Qpa5580
Qualcomm Qpa5581
Qualcomm Qpa6560
Qualcomm Qpa8801
Qualcomm Qpa8802
Qualcomm Qpa8803
Qualcomm Qpa8821
Qualcomm Qpa8842
Qualcomm Qpm4621
Qualcomm Qpm4630
Qualcomm Qpm4640
Qualcomm Qpm4641
Qualcomm Qpm4650
Qualcomm Qpm5621
Qualcomm Qpm5641
Qualcomm Qpm5670
Qualcomm Qpm5677
Qualcomm Qpm5679
Qualcomm Qpm5870
Qualcomm Qpm5875
Qualcomm Qpm6585
Qualcomm Qpm6621
Qualcomm Qpm6670
Qualcomm Qpm8820
Qualcomm Qpm8870
Qualcomm Qtm525
Qualcomm Sa6145p
Qualcomm Sa6155p
Qualcomm Sa8150p
Qualcomm Sa8155
Qualcomm Sa8155p
Qualcomm Sa8195p
Qualcomm Sd8885g
Qualcomm Sdr660g
Qualcomm Sdr735
Qualcomm Sdr735g
Qualcomm Sdr8250
Qualcomm Sdr865
Qualcomm Sdx55
Qualcomm Sdx55m
Qualcomm Sm7350
Qualcomm Smb1394
Qualcomm Smb1395
Qualcomm Smb1396
Qualcomm Smb1398
Qualcomm Smr525
Qualcomm Smr526
Qualcomm Smr545
Qualcomm Smr546
Qualcomm Wcd9341
Qualcomm Wcd9380
Qualcomm Wcd9385
Qualcomm Wcn3910
Qualcomm Wcn3991
Qualcomm Wcn3998
Qualcomm Wcn6740
Qualcomm Wcn6750
Qualcomm Wcn6850
Qualcomm Wcn6851
Qualcomm Wcn6856
Qualcomm Wsa8830
Qualcomm Wsa8835
Remediation
Event History
Dec 7, 2020
CVE Published
via Android·12:00 AM
Jan 21, 2021
CVE Published
via MITRE·09:41 AM
Data Sourced
via MITRE·09:41 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-11185?
CVE-2020-11185 has a high severity rating due to the potential for remote code execution caused by an out-of-bounds write in the WLAN driver.
2
How do I fix CVE-2020-11185?
To fix CVE-2020-11185, update your device firmware to the latest version provided by your device manufacturer.
3
Which products are affected by CVE-2020-11185?
CVE-2020-11185 affects a variety of Qualcomm products, including but not limited to certain Android devices and specific Snapdragon chipsets.
4
What type of vulnerability is CVE-2020-11185?
CVE-2020-11185 is characterized as an out-of-bounds write vulnerability in the WLAN driver.
5
Can CVE-2020-11185 be exploited remotely?
Yes, CVE-2020-11185 can potentially be exploited remotely, allowing attackers to execute arbitrary code on affected devices.