ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-11176

—
CVSS 3.1
9.8 critical
EPSS
<1%p50
Published
()
Modified
Description

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

Vendors
qualcomm
Products
apq8017 firmware, apq8053 firmware, aqt1000 firmware, ar8035 firmware, csrb31024 firmware, msm8917 firmware, msm8920 firmware, msm8940 firmware, msm8953 firmware, msm8976 firmware, msm8976sg firmware, qca6174a firmware
Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

No ingested article mentions this CVE yet.