ID
VAR-202011-0123
CVE
CVE-2020-11114
TITLE
plural Qualcomm Out-of-bounds read vulnerabilities in the product
Trust: 0.8
DESCRIPTION
u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link Layer packet(Equivalent to CVE-2019-17060,CVE-2019-17061 and CVE-2019-17517 in Sweyntooth paper)' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in AR9344. plural Qualcomm The product contains an out-of-bounds read vulnerability. This vulnerability is CVE-2019-17060 , CVE-2019-17061 , CVE-2019-17517 It is the same vulnerability as.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Qualcomm AR9344 is a Qualcomm mobile device chip from Qualcomm. Several components in AR9344 have security vulnerabilities, which can cause buffer overflow problems
Trust: 2.25
IOT TAXONOMY
| category: | ['network device'] | sub_category: | bluetooth device | Trust: 0.1 |
AFFECTED PRODUCTS
| vendor: | qualcomm | model: | ar9344 | scope: | eq | version: | - | Trust: 1.0 |
| vendor: | クアルコム | model: | ar9344 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | クアルコム | model: | ar9344 | scope: | eq | version: | ar9344 firmware | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-125 | Trust: 1.0 |
| problemtype: | Out-of-bounds read (CWE-125) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
remote or local
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | October 2020 Security Bulletin | url: | https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin | Trust: 0.8 |
| title: | Qualcomm AR9344 Buffer error vulnerability fix | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=133135 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-11114 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2020-012934 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202011-125 | Trust: 0.6 |
| db: | OTHER | id: | NONE | Trust: 0.1 |
| db: | VULMON | id: | CVE-2020-11114 | Trust: 0.1 |
REFERENCES
| url: | https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin | Trust: 1.7 |
| url: | https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-11114 | Trust: 1.4 |
| url: | https://ieeexplore.ieee.org/abstract/document/10769424 | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | OTHER | id: | - |
| db: | VULMON | id: | CVE-2020-11114 |
| db: | JVNDB | id: | JVNDB-2020-012934 |
| db: | CNNVD | id: | CNNVD-202011-125 |
| db: | NVD | id: | CVE-2020-11114 |
LAST UPDATE DATE
2025-01-30T22:09:31.055000+00:00
SOURCES UPDATE DATE
| db: | VULMON | id: | CVE-2020-11114 | date: | 2020-11-09T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012934 | date: | 2021-06-15T06:01:00 |
| db: | CNNVD | id: | CNNVD-202011-125 | date: | 2020-11-12T00:00:00 |
| db: | NVD | id: | CVE-2020-11114 | date: | 2024-11-21T04:56:49.640 |
SOURCES RELEASE DATE
| db: | VULMON | id: | CVE-2020-11114 | date: | 2020-11-02T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012934 | date: | 2021-06-15T00:00:00 |
| db: | CNNVD | id: | CNNVD-202011-125 | date: | 2020-11-02T00:00:00 |
| db: | NVD | id: | CVE-2020-11114 | date: | 2020-11-02T07:15:12.280 |