CVE-2020-11159

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in…

published June 9, 2021

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

⚠️ Buffer over-reads in Snapdragon could lead to unexpected data exposure! While processing certain frames, it’s like opening a box of chocolates only to find someone has eaten half of them without your knowledge! 🍫 Think of it as a mail slot in an office that’s too wide, allowing someone to peek inside and see confidential documents without actually going in — very sneaky! 📬 While the severity is currently unknown, the implications of a buffer over-read could potentially expose sensitive information or lead to unexpected behavior in devices. In a worst-case scenario, it might give attackers a window into data that should remain secure, which is absolutely concerning!

Put simply

Think of it as a mail slot in an office that’s too wide, allowing someone to peek inside and see confidential documents without actually going in — very sneaky! 📬 This vulnerability arises when processing WPA and RSN Information Elements (IEs) in beacon and response frames, where the IE length may be incorrectly accessed, allowing for unintended memory reading.

What to do

While the severity is currently unknown, the implications of a buffer over-read could potentially expose sensitive information or lead to unexpected behavior in devices. In a worst-case scenario, it might give attackers a window into data that should remain secure, which is absolutely concerning! To address this issue, ensure that your device firmware is up to date with the latest patches provided by Qualcomm. Regularly check for updates and follow manufacturer guidelines to mitigate any risks. You've got this! With a little proactive care, you can keep everything secure and running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Published
2021-06-09T05:00Z
EPSS history
Timeline
  • 09 JUN 05:00Z
    Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in…
    cvelistv5