CVE-2020-11166

Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon…

published March 17, 2021

CVSS
—
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

🚨 A potential out-of-bounds read lurks in the padding of ROHC headers on Snapdragon devices! 📱🤖 Think of it like a delivery truck arriving with an enormous, jumbled package at a small storefront; if the shop can't handle the overflow, chaos ensues inside! An attacker could send specially crafted data that overwhelms the system, leading to unexpected behavior or even crashing affected devices. This could disrupt services and functionality, putting users in a tight spot if their devices aren't responding at crucial moments! 🚨

Put simply

Think of it like a delivery truck arriving with an enormous, jumbled package at a small storefront; if the shop can't handle the overflow, chaos ensues inside! This vulnerability arises when the User Equipment (UE) receives an unusually large number of padding octets in the beginning of the ROHC header, potentially causing an out-of-bounds read exception in various Snapdragon platforms.

What to do

An attacker could send specially crafted data that overwhelms the system, leading to unexpected behavior or even crashing affected devices. This could disrupt services and functionality, putting users in a tight spot if their devices aren't responding at crucial moments! 🚨 Although there's no known exploitation, it's wise to monitor for updates from Qualcomm and apply any patches they release for affected Snapdragon components. Keeping your devices updated will ensure you stay ahead of potential threats! 🔥 You've got this! Stay proactive, and your devices will be safer in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00918 · 59.8th percentile
Published
2021-03-17T06:00Z
EPSS history
Timeline
  • 17 MAR 06:00Z
    Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon…
    cvelistv5