CVE-2020-11264: Qualcomm APQ8053 Firmware

Critical severity, CVSS 9.8. EPSS: 13.2% chance of exploitation in the next 30 days.

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Affected products

  • Qualcomm APQ8053 Firmware: affected versions not specified
  • Qualcomm APQ8064AU Firmware: affected versions not specified
  • Qualcomm APQ8096AU Firmware: affected versions not specified
  • Qualcomm AQT1000 Firmware: affected versions not specified
  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm CSRB31024 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm MSM8953 Firmware: affected versions not specified
  • Qualcomm MSM8996AU Firmware: affected versions not specified
  • Qualcomm QCA1062 Firmware: affected versions not specified
  • Qualcomm QCA1064 Firmware: affected versions not specified
  • Qualcomm QCA2062 Firmware: affected versions not specified
  • Qualcomm QCA2064 Firmware: affected versions not specified
  • Qualcomm QCA2065 Firmware: affected versions not specified
  • Qualcomm QCA2066 Firmware: affected versions not specified
  • Qualcomm QCA6164 Firmware: affected versions not specified
  • Qualcomm QCA6174 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6175A Firmware: affected versions not specified
  • Qualcomm QCA6390 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6420 Firmware: affected versions not specified
  • and 101 more

Published 2021-09-08. Last modified 2026-06-17.