60
CVE-2020-11241
—CVSS 3.1
7.5 high
EPSS
<1%p47
Published
()
Modified
Description
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
- Vendors
- qualcomm
- Products
- apq8009 firmware, apq8096au firmware, aqt1000 firmware, ar8031 firmware, ar8035 firmware, ar9380 firmware, csr8811 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, ipq4018 firmware, ipq4028 firmware
- Weakness
- CWE-125
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H