CVE-2020-11267: Qualcomm APQ8009 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

  • Qualcomm APQ8009 Firmware: affected versions not specified
  • Qualcomm APQ8009W Firmware: affected versions not specified
  • Qualcomm APQ8017 Firmware: affected versions not specified
  • Qualcomm APQ8053 Firmware: affected versions not specified
  • Qualcomm APQ8064AU Firmware: affected versions not specified
  • Qualcomm APQ8076 Firmware: affected versions not specified
  • Qualcomm APQ8096AU Firmware: affected versions not specified
  • Qualcomm AQT1000 Firmware: affected versions not specified
  • Qualcomm AR7420 Firmware: affected versions not specified
  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm AR9380 Firmware: affected versions not specified
  • Qualcomm CSR6030 Firmware: affected versions not specified
  • Qualcomm CSR8811 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm CSRB31024 Firmware: affected versions not specified
  • Qualcomm FSM10055 Firmware: affected versions not specified
  • Qualcomm FSM10056 Firmware: affected versions not specified
  • Qualcomm IPQ4018 Firmware: affected versions not specified
  • Qualcomm IPQ4019 Firmware: affected versions not specified
  • Qualcomm IPQ4028 Firmware: affected versions not specified
  • Qualcomm IPQ4029 Firmware: affected versions not specified
  • Qualcomm IPQ5010 Firmware: affected versions not specified
  • Qualcomm IPQ5018 Firmware: affected versions not specified
  • and 246 more

Published 2021-06-09. Last modified 2026-06-17.