CVE-2020-11185
high-risk
Published 2021-01-21
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Do I need to act?
-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Products (20)
Ar9380
Csr8811
Ipq4018
Ipq4019
Ipq4028
Ipq4029
Ipq6000
Ipq6005
Ipq6010
Ipq6018
Ipq6028
Ipq8064
Ipq8065
Ipq8068
Ipq8070
Ipq8070A
Ipq8071
Ipq8071A
Ipq8072
Ipq8072A
Affected Vendors
57
/ 100
high-risk
Severity
24/34 · High
Exploitability
0/34 · Minimal
Exposure
33/34 · Critical