ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-11163

—
CVSS 3.1
9.8 critical
EPSS
<1%p55
Published
()
Modified
Description

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendors
qualcomm
Products
apq8017 firmware, aqt1000 firmware, ar8035 firmware, csrb31024 firmware, msm8917 firmware, pm215 firmware, pm3003a firmware, pm4125 firmware, pm4250 firmware, pm439 firmware, pm456 firmware, pm6125 firmware
Weakness
CWE-129
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

No ingested article mentions this CVE yet.