{"id":"CVE-2020-11169","aliases":["EUVD-2020-3523","GHSA-xmq2-m5xv-mwcj"],"status":"published","title":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check'...","description":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00764,"percentile":0.55851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-190"],"published":"2020-11-02T06:21:25Z","modified":"2026-06-17T02:49:20Z","products":[{"vendor":"qualcomm","product":"apq8009_firmware"},{"vendor":"qualcomm","product":"apq8053_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qcn7605_firmware"},{"vendor":"qualcomm","product":"qcn7606_firmware"},{"vendor":"qualcomm","product":"sa415m_firmware"},{"vendor":"qualcomm","product":"sa515m_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sc8180x_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11169"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin","tags":["Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-xmq2-m5xv-mwcj"}],"sources":{"cve":[{"id":"CVE-2020-11169","description":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","status":"published","published":"2020-11-02T06:21:25Z","modified":"2024-08-04T11:28:13.197Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3523","description":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","status":"published","published":"2020-11-02T06:21:25Z","modified":"2024-08-04T11:28:13Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-xmq2-m5xv-mwcj","title":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check'...","description":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","status":"published","published":"2022-05-24T17:32:49Z","modified":"2023-01-29T05:05:11Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:45:43.934947Z"}],"nvd":[{"id":"CVE-2020-11169","description":"u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","status":"published","published":"2020-11-02T07:15:13.997Z","modified":"2026-06-17T02:49:20.28Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125","CWE-190"],"updated_at":"2026-11-02T14:06:21.80969Z"}]}}