CVE-2020-11303: Qualcomm APQ8009 Firmware

High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days.

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

  • Qualcomm APQ8009 Firmware: affected versions not specified
  • Qualcomm APQ8053 Firmware: affected versions not specified
  • Qualcomm APQ8064AU Firmware: affected versions not specified
  • Qualcomm APQ8076 Firmware: affected versions not specified
  • Qualcomm APQ8092 Firmware: affected versions not specified
  • Qualcomm APQ8094 Firmware: affected versions not specified
  • Qualcomm APQ8096AU Firmware: affected versions not specified
  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm CSR6030 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm MDM8215 Firmware: affected versions not specified
  • Qualcomm MDM9206 Firmware: affected versions not specified
  • Qualcomm MDM9215 Firmware: affected versions not specified
  • Qualcomm MDM9250 Firmware: affected versions not specified
  • Qualcomm MDM9310 Firmware: affected versions not specified
  • Qualcomm MDM9607 Firmware: affected versions not specified
  • Qualcomm MDM9615 Firmware: affected versions not specified
  • Qualcomm MDM9626 Firmware: affected versions not specified
  • Qualcomm MDM9628 Firmware: affected versions not specified
  • Qualcomm MDM9640 Firmware: affected versions not specified
  • Qualcomm MDM9645 Firmware: affected versions not specified
  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm MDM9655 Firmware: affected versions not specified
  • Qualcomm MSM8976 Firmware: affected versions not specified
  • and 66 more

Published 2021-10-20. Last modified 2026-06-17.