CVE-2020-11291: Out-of-bounds Read
First published: Mon Jun 07 2021(Updated: )
Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8017 | ||
| Qualcomm APQ8017 | ||
| Qualcomm APQ8053 | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm AQT1000 Firmware | ||
| Qualcomm AQT1000 Firmware | ||
| Qualcomm CSRB31024 Firmware | ||
| Qualcomm CSRB31024 Firmware | ||
| Qualcomm MSM8917 | ||
| Qualcomm MSM8917 Firmware | ||
| Qualcomm 8920 Firmware | ||
| Qualcomm 8920 | ||
| qualcomm MSM8940 firmware | ||
| qualcomm MSM8940 firmware | ||
| Qualcomm 8953Pro Firmware | ||
| Qualcomm MSM8953 Firmware | ||
| Qualcomm 8976 Firmware | ||
| Qualcomm 8976 | ||
| Qualcomm MSM8976SG Firmware | ||
| Qualcomm 8976 | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6390 Firmware | ||
| Qualcomm QCA6390 Firmware | ||
| Qualcomm QCA6391 Firmware | ||
| Qualcomm QCA6391 Firmware | ||
| Qualcomm QCA6420 Firmware | ||
| Qualcomm QCA6420 Firmware | ||
| Qualcomm QCA6421 Firmware | ||
| Qualcomm QCA6421 Firmware | ||
| Qualcomm QCA6426 Firmware | ||
| Qualcomm QCA6426 Firmware | ||
| Qualcomm QCA6430 firmware | ||
| Qualcomm QCA6430 firmware | ||
| Qualcomm QCA6431 Firmware | ||
| Qualcomm QCA6431 | ||
| Qualcomm QCA6436 Firmware | ||
| Qualcomm QCA6436 Firmware | ||
| Qualcomm QCA6564AU Firmware | ||
| Qualcomm QCA6564A | ||
| Qualcomm QCA6574A Firmware | ||
| qualcomm qca6574a firmware | ||
| Qualcomm QCA6574 Firmware | ||
| Qualcomm QCA6574AU | ||
| Qualcomm QCA6584AU Firmware | ||
| Qualcomm QCA6584AU firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA6595AU Firmware | ||
| Qualcomm QCA6696 Firmware | ||
| Qualcomm QCA6696 Firmware | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCA9379 | ||
| Qualcomm QCA9379 | ||
| Qualcomm QCM4290 | ||
| Qualcomm QCM4290 Firmware | ||
| Qualcomm QCM6125 Firmware | ||
| Qualcomm QCM6125 Firmware | ||
| Qualcomm QCS410 Firmware | ||
| Qualcomm QCS410 Firmware | ||
| Qualcomm QCS4290 Firmware | ||
| Qualcomm QCS4290 Firmware | ||
| Qualcomm QCS610 Firmware | ||
| Qualcomm QCS610 Firmware | ||
| Qualcomm QCS6125 Firmware | ||
| Qualcomm QCS6125 Firmware | ||
| Qualcomm SA415M Firmware | ||
| Qualcomm SA415M Firmware | ||
| Qualcomm SA515M Firmware | ||
| Qualcomm SA515M Firmware | ||
| Qualcomm SA8155P Firmware | ||
| Qualcomm SA8155 Firmware | ||
| Qualcomm SA8155 | ||
| Qualcomm SA8155P Firmware | ||
| qualcomm sc8180x+sdx55 Firmware | ||
| Qualcomm SC8180X+SDX55 | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm SD 8C Firmware | ||
| Qualcomm Snapdragon 8c | ||
| Qualcomm SD 8cx firmware | ||
| Qualcomm Snapdragon 8cx | ||
| Qualcomm SD 450 Firmware | ||
| Qualcomm Snapdragon 450 | ||
| Qualcomm SD 480 Firmware | ||
| Qualcomm Snapdragon 480 | ||
| Qualcomm Snapdragon 665 | ||
| Qualcomm Snapdragon 665 | ||
| Qualcomm SD 670 | ||
| Qualcomm SD 670 | ||
| Qualcomm SD 675 Firmware | ||
| Qualcomm Snapdragon 675 | ||
| Qualcomm SD678 Firmware | ||
| Qualcomm SD678 Firmware | ||
| Qualcomm Snapdragon 690 5G Firmware | ||
| Qualcomm Snapdragon 690 5G Firmware | ||
| Qualcomm Snapdragon 720G Firmware | ||
| Qualcomm SD720G Firmware | ||
| Qualcomm SD 730 Firmware | ||
| Qualcomm Snapdragon 730 | ||
| Qualcomm SD750G Firmware | ||
| Qualcomm Snapdragon 750G | ||
| Qualcomm SD765 Firmware | ||
| Qualcomm Snapdragon 765 | ||
| Qualcomm SD765 Firmware | ||
| Qualcomm Snapdragon 765G | ||
| Qualcomm SD768 Firmware | ||
| Qualcomm SD768G Firmware | ||
| Qualcomm SDA845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| Qualcomm Snapdragon 855 | ||
| Qualcomm Snapdragon 855 | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| Qualcomm Snapdragon 865 5G Firmware | ||
| Qualcomm SD870 | ||
| Qualcomm Snapdragon 870 | ||
| Qualcomm Snapdragon 888 5G Firmware | ||
| Qualcomm Snapdragon 888 5G | ||
| Qualcomm SDX24 | ||
| Qualcomm SDX24 | ||
| Qualcomm SDX50M Firmware | ||
| Qualcomm SDX50M Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55 Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDXR2 5G Firmware | ||
| Qualcomm SDXR2 5G Firmware | ||
| Qualcomm SM6250P Firmware | ||
| Qualcomm SM6250 Firmware | ||
| Qualcomm SM6250 Firmware | ||
| Qualcomm SM6250P Firmware | ||
| Qualcomm SM7250 Firmware | ||
| Qualcomm SM7250 | ||
| Qualcomm WCD9326 | ||
| Qualcomm WCD9326 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9335 Firmware | ||
| Qualcomm WCD9340 Firmware | ||
| Qualcomm WCD9340 Firmware | ||
| Qualcomm WCD9341 | ||
| Qualcomm WCD9341 Firmware | ||
| Qualcomm WCD9360 Firmware | ||
| Qualcomm WCD9360 Firmware | ||
| Qualcomm WCD9370 Firmware | ||
| Qualcomm WCD9370 Firmware | ||
| Qualcomm WCD9371 Firmware | ||
| Qualcomm WCD9371 Firmware | ||
| Qualcomm WCD9375 | ||
| Qualcomm WCD9375 Firmware | ||
| Qualcomm WCD9380 | ||
| Qualcomm WCD9380 Firmware | ||
| Qualcomm WCD9385 | ||
| Qualcomm WCD9385 Firmware | ||
| Qualcomm WCN3615 Firmware | ||
| Qualcomm WCN3615 Firmware | ||
| Qualcomm WCN3660B | ||
| Qualcomm WCN3660B Firmware | ||
| Qualcomm WCN3680B Firmware | ||
| Qualcomm WCN3680B Firmware | ||
| Qualcomm WCN3910 Firmware | ||
| Qualcomm WCN3910 Firmware | ||
| Qualcomm WCN3950 Firmware | ||
| Qualcomm WCN3950 Firmware | ||
| Qualcomm Wcn3980 | ||
| Qualcomm WCN3980 | ||
| Qualcomm WCN3988 Firmware | ||
| Qualcomm WCN3988 Firmware | ||
| Qualcomm WCN3990 | ||
| Qualcomm WCN3990 | ||
| Qualcomm WCN3991 Firmware | ||
| Qualcomm WCN3991 Firmware | ||
| Qualcomm WCN3998 Firmware | ||
| Qualcomm wcn3998 firmware | ||
| Qualcomm WCN6850 Firmware | ||
| Qualcomm WCN6850 Firmware | ||
| Qualcomm WCN6851 Firmware | ||
| Qualcomm WCN6851 Firmware | ||
| Qualcomm WCN6855 Firmware | ||
| Qualcomm WCN6855 Firmware | ||
| Qualcomm WCN6856 Firmware | ||
| Qualcomm WCN6856 Firmware | ||
| Qualcomm WHS9410 | ||
| Qualcomm WHS9410 | ||
| Qualcomm WSA8810 | ||
| Qualcomm WSA8810 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8815 Firmware | ||
| Qualcomm WSA8830 | ||
| Qualcomm WSA8830 | ||
| Qualcomm WSA8835 | ||
| Qualcomm WSA8835 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-11291?
The severity of CVE-2020-11291 is considered high, due to potential remote code execution risks.
How do I fix CVE-2020-11291?
To fix CVE-2020-11291, update the affected Qualcomm firmware to the latest version provided by the vendor.
Which devices are affected by CVE-2020-11291?
CVE-2020-11291 affects various Qualcomm devices including Snapdragon platforms such as APQ8017, APQ8053, and others listed in security bulletins.
What type of vulnerability is CVE-2020-11291?
CVE-2020-11291 is categorized as a buffer overflow vulnerability associated with IKEv2 parameters.
How can attackers exploit CVE-2020-11291?
Attackers can exploit CVE-2020-11291 remotely by sending specially crafted packets to trigger the buffer overflow.
- agent/type
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/event
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8017
- canonical/qualcomm apq8053
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm aqt1000 firmware
- canonical/qualcomm csrb31024 firmware
- canonical/qualcomm msm8917
- canonical/qualcomm msm8917 firmware
- canonical/qualcomm 8920 firmware
- canonical/qualcomm 8920
- canonical/qualcomm msm8940 firmware
- canonical/qualcomm 8953pro firmware
- canonical/qualcomm msm8953 firmware
- canonical/qualcomm 8976 firmware
- canonical/qualcomm 8976
- canonical/qualcomm msm8976sg firmware
- canonical/qualcomm qca6174a firmware
- canonical/qualcomm qca6390 firmware
- canonical/qualcomm qca6391 firmware
- canonical/qualcomm qca6420 firmware
- canonical/qualcomm qca6421 firmware
- canonical/qualcomm qca6426 firmware
- canonical/qualcomm qca6430 firmware
- canonical/qualcomm qca6431 firmware
- canonical/qualcomm qca6431
- canonical/qualcomm qca6436 firmware
- canonical/qualcomm qca6564au firmware
- canonical/qualcomm qca6564a
- canonical/qualcomm qca6574a firmware
- canonical/qualcomm qca6574 firmware
- canonical/qualcomm qca6574au
- canonical/qualcomm qca6584au firmware
- canonical/qualcomm qca6595au firmware
- canonical/qualcomm qca6696 firmware
- canonical/qualcomm qca9377 firmware
- canonical/qualcomm qca9379
- canonical/qualcomm qcm4290
- canonical/qualcomm qcm4290 firmware
- canonical/qualcomm qcm6125 firmware
- canonical/qualcomm qcs410 firmware
- canonical/qualcomm qcs4290 firmware
- canonical/qualcomm qcs610 firmware
- canonical/qualcomm qcs6125 firmware
- canonical/qualcomm sa415m firmware
- canonical/qualcomm sa515m firmware
- canonical/qualcomm sa8155p firmware
- canonical/qualcomm sa8155 firmware
- canonical/qualcomm sa8155
- canonical/qualcomm sc8180x+sdx55 firmware
- canonical/qualcomm sc8180x+sdx55
- canonical/qualcomm sd 675 firmware
- canonical/qualcomm snapdragon 675
- canonical/qualcomm sd 8c firmware
- canonical/qualcomm snapdragon 8c
- canonical/qualcomm sd 8cx firmware
- canonical/qualcomm snapdragon 8cx
- canonical/qualcomm sd 450 firmware
- canonical/qualcomm snapdragon 450
- canonical/qualcomm sd 480 firmware
- canonical/qualcomm snapdragon 480
- canonical/qualcomm snapdragon 665
- canonical/qualcomm sd 670
- canonical/qualcomm sd678 firmware
- canonical/qualcomm snapdragon 690 5g firmware
- canonical/qualcomm snapdragon 720g firmware
- canonical/qualcomm sd720g firmware
- canonical/qualcomm sd 730 firmware
- canonical/qualcomm snapdragon 730
- canonical/qualcomm sd750g firmware
- canonical/qualcomm snapdragon 750g
- canonical/qualcomm sd765 firmware
- canonical/qualcomm snapdragon 765
- canonical/qualcomm snapdragon 765g
- canonical/qualcomm sd768 firmware
- canonical/qualcomm sd768g firmware
- canonical/qualcomm sda845 firmware
- canonical/qualcomm snapdragon 845
- canonical/qualcomm snapdragon 855
- canonical/qualcomm snapdragon 865 5g firmware
- canonical/qualcomm sd870
- canonical/qualcomm snapdragon 870
- canonical/qualcomm snapdragon 888 5g firmware
- canonical/qualcomm snapdragon 888 5g
- canonical/qualcomm sdx24
- canonical/qualcomm sdx50m firmware
- canonical/qualcomm sdx55m firmware
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sdxr2 5g firmware
- canonical/qualcomm sm6250p firmware
- canonical/qualcomm sm6250 firmware
- canonical/qualcomm sm7250 firmware
- canonical/qualcomm sm7250
- canonical/qualcomm wcd9326
- canonical/qualcomm wcd9326 firmware
- canonical/qualcomm wcd9335 firmware
- canonical/qualcomm wcd9340 firmware
- canonical/qualcomm wcd9341
- canonical/qualcomm wcd9341 firmware
- canonical/qualcomm wcd9360 firmware
- canonical/qualcomm wcd9370 firmware
- canonical/qualcomm wcd9371 firmware
- canonical/qualcomm wcd9375
- canonical/qualcomm wcd9375 firmware
- canonical/qualcomm wcd9380
- canonical/qualcomm wcd9380 firmware
- canonical/qualcomm wcd9385
- canonical/qualcomm wcd9385 firmware
- canonical/qualcomm wcn3615 firmware
- canonical/qualcomm wcn3660b
- canonical/qualcomm wcn3660b firmware
- canonical/qualcomm wcn3680b firmware
- canonical/qualcomm wcn3910 firmware
- canonical/qualcomm wcn3950 firmware
- canonical/qualcomm wcn3980
- canonical/qualcomm wcn3988 firmware
- canonical/qualcomm wcn3990
- canonical/qualcomm wcn3991 firmware
- canonical/qualcomm wcn3998 firmware
- canonical/qualcomm wcn6850 firmware
- canonical/qualcomm wcn6851 firmware
- canonical/qualcomm wcn6855 firmware
- canonical/qualcomm wcn6856 firmware
- canonical/qualcomm whs9410
- canonical/qualcomm wsa8810
- canonical/qualcomm wsa8810 firmware
- canonical/qualcomm wsa8815 firmware
- canonical/qualcomm wsa8830
- canonical/qualcomm wsa8835
- canonical/qualcomm wsa8835 firmware