CVE-2020-11291critical

CVE-2020-11291: falha crítica em Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Snapdragon Mobile+ Monitorar Snapdragon Industrial IOT

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.9%
Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
CVEs relacionadas — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

No mesmo produto, das mais perigosas para as menos.

CVE-2020-11222—CVE-2020-11222EPSS 0.9%CVE-2020-11176CRITICALCVE-2020-11176EPSS 0.7%