CVE Feed

    Dashboard / CVE / CVE-2020-11266

    CVE-2020-11266

    Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking

    Published:Jun 9, 2021
    Last Modified:Nov 21, 2024
    EPS:Jun 9, 2021
    EPSS Score:0.00045
    CVSS Score:6.5

    Affected Products

    Vendor
    Qualcomm
    Product
    Ar7420
    Vendor
    Qualcomm
    Product
    Ar7420 Firmware
    Vendor
    Qualcomm
    Product
    Ar9580
    Vendor
    Qualcomm
    Product
    Ar9580 Firmware
    Vendor
    Qualcomm
    Product
    Csr8811
    Vendor
    Qualcomm
    Product
    Csr8811 Firmware
    Vendor
    Qualcomm
    Product
    Ipq4018
    Vendor
    Qualcomm
    Product
    Ipq4018 Firmware
    Vendor
    Qualcomm
    Product
    Ipq4019
    Vendor
    Qualcomm
    Product
    Ipq4019 Firmware
    Vendor
    Qualcomm
    Product
    Ipq4028
    Vendor
    Qualcomm
    Product
    Ipq4028 Firmware
    Vendor
    Qualcomm
    Product
    Ipq4029
    Vendor
    Qualcomm
    Product
    Ipq4029 Firmware
    Vendor
    Qualcomm
    Product
    Qca10901
    Vendor
    Qualcomm
    Product
    Qca10901 Firmware
    Vendor
    Qualcomm
    Product
    Qca4024
    Vendor
    Qualcomm
    Product
    Qca4024 Firmware
    Vendor
    Qualcomm
    Product
    Qca7500
    Vendor
    Qualcomm
    Product
    Qca7500 Firmware
    Vendor
    Qualcomm
    Product
    Qca7520
    Vendor
    Qualcomm
    Product
    Qca7520 Firmware
    Vendor
    Qualcomm
    Product
    Qca7550
    Vendor
    Qualcomm
    Product
    Qca7550 Firmware
    Vendor
    Qualcomm
    Product
    Qca8075
    Vendor
    Qualcomm
    Product
    Qca8075 Firmware
    Vendor
    Qualcomm
    Product
    Qca9880
    Vendor
    Qualcomm
    Product
    Qca9880 Firmware
    Vendor
    Qualcomm
    Product
    Qca9886
    Vendor
    Qualcomm
    Product
    Qca9886 Firmware
    Vendor
    Qualcomm
    Product
    Qca9888
    Vendor
    Qualcomm
    Product
    Qca9888 Firmware
    Vendor
    Qualcomm
    Product
    Qca9889
    Vendor
    Qualcomm
    Product
    Qca9889 Firmware
    Vendor
    Qualcomm
    Product
    Qca9898
    Vendor
    Qualcomm
    Product
    Qca9898 Firmware
    Vendor
    Qualcomm
    Product
    Qca9984
    Vendor
    Qualcomm
    Product
    Qca9984 Firmware
    Vendor
    Qualcomm
    Product
    Qca9992
    Vendor
    Qualcomm
    Product
    Qca9992 Firmware
    Vendor
    Qualcomm
    Product
    Qca9994
    Vendor
    Qualcomm
    Product
    Qca9994 Firmware
    Vendor
    Qualcomm
    Product
    Qcn3018
    Vendor
    Qualcomm
    Product
    Qcn3018 Firmware
    Vendor
    Qualcomm
    Product
    Qfe1922
    Vendor
    Qualcomm
    Product
    Qfe1922 Firmware
    Vendor
    Qualcomm
    Product
    Qfe1952
    Vendor
    Qualcomm
    Product
    Qfe1952 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9340
    Vendor
    Qualcomm
    Product
    Wcd9340 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-21482 (CVSS 7.1) — Cryptographic issue while performing RSA PKCS padding decoding.…
    CVE-2023-28565 (CVSS 7.8) — Memory corruption in WLAN HAL while handling command streams through WMI interfaces.…
    CVE-2021-30303 (CVSS 7.8) — Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdrag…
    CVE-2021-1924 (CVSS 9) — Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdra…
    CVE-2021-1976 (CVSS 9.8) — A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon …
    CVE-2021-1909 (CVSS 7.3) — Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, S…
    CVE-2021-1972 (CVSS 9.8) — Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snap…
    CVE-2020-11301 (CVSS 9.1) — Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information…
    CVE-2021-1887 (CVSS 7.5) — An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Sn…
    CVE-2020-11267 (CVSS 8.4) — Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max li…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High