CVE-2020-11305: Buffer Overflow

Published Mar 17, 2021

Updated

Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Affected Software

40 affected components

QUALCOMM Apq8009 Firmware

QUALCOMM Apq8009

QUALCOMM Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Mdm9206 Firmware

Qualcomm MDM9206

Qualcomm Pm8909 Firmware

Qualcomm Pm8909

Qualcomm Pm8916 Firmware

Qualcomm Pm8916

Qualcomm Pm8953 Firmware

Qualcomm Pm8953

Qualcomm Pmd9607 Firmware

Qualcomm Pmd9607

Qualcomm Pmi8952 Firmware

Qualcomm Pmi8952

Qualcomm Qca9367 Firmware

Qualcomm Qca9367

Qualcomm Qca9377 Firmware

Qualcomm QCA9377

Qualcomm Smb1358 Firmware

Qualcomm Smb1358

Qualcomm Smb1360 Firmware

Qualcomm Smb1360

Qualcomm Smb231 Firmware

Qualcomm Smb231

Qualcomm Wcd9326 Firmware

Qualcomm Wcd9326

Qualcomm Wcd9330 Firmware

Qualcomm Wcd9330

Qualcomm Wcn3660b Firmware

Qualcomm Wcn3660b

Qualcomm Wcn3680b Firmware

Qualcomm Wcn3680b

Qualcomm Wsa8810 Firmware

Qualcomm Wsa8810

Qualcomm Wsa8815 Firmware

Qualcomm Wsa8815

Qualcomm Wtr2965 Firmware

Qualcomm Wtr2965

Remediation

Patch Available

https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin

Event History

Mar 17, 2021

CVE Published

via MITRE·06:01 AM

Data Sourced

via MITRE·06:01 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2020-11305.

What is the severity rating of CVE-2020-11305?

CVE-2020-11305 has a severity rating of 6.8 (medium).

Which software or devices are affected by CVE-2020-11305?

CVE-2020-11305 affects Qualcomm APQ8009 Firmware, Qualcomm MDM9206 Firmware, Qualcomm PM8909 Firmware, Qualcomm PM8916 Firmware, Qualcomm PM8953 Firmware, Qualcomm PMI8952 Firmware, Qualcomm QCA9367 Firmware, Qualcomm QCA9377 Firmware, Qualcomm SMB1358 Firmware, Qualcomm SMB1360 Firmware, Qualcomm SMB231 Firmware, Qualcomm WCD9326 Firmware, Qualcomm WCD9330 Firmware, Qualcomm WCN3660B Firmware, Qualcomm WCN3680B Firmware, Qualcomm WSA8810 Firmware, and Qualcomm WSA8815 Firmware.

What is the description of CVE-2020-11305?

CVE-2020-11305 is an integer overflow vulnerability in boot due to an improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music.

Where can I find more information about CVE-2020-11305?

You can find more information about CVE-2020-11305 in the official Qualcomm Product Security Bulletin for March 2021.