CVE-2020-11167

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute…

published January 21, 2021

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

⚠️ A rogue packet could flip the script! When a remote device sends more data than expected, it creates a memory corruption issue in Snapdragon components that could lead to unexpected behavior. 🔥 Think of it like a delivery service receiving more boxes than they expected, causing chaos in their sorting system. If they can't handle the excess packages, it could lead to lost items or delays in service. An attacker could exploit this vulnerability to disrupt operations, potentially causing devices to crash or behave erratically. While not widely exploited yet, the risks could lead to instability in critical applications relying on Snapdragon technology.

Put simply

Think of it like a delivery service receiving more boxes than they expected, causing chaos in their sorting system. If they can't handle the excess packages, it could lead to lost items or delays in service. This vulnerability arises in the reassembly logic of L2CAP packets, where the system doesn't appropriately handle the length of incoming data. When a remote device over-sends data, it can corrupt memory, leading to unpredictable outcomes.

What to do

An attacker could exploit this vulnerability to disrupt operations, potentially causing devices to crash or behave erratically. While not widely exploited yet, the risks could lead to instability in critical applications relying on Snapdragon technology. To mitigate this issue, ensure that your Snapdragon components are updated to the latest firmware version. It’s also advisable to conduct a thorough review of how your devices handle packet reassembly and enforce strict limits on data size. You've got this! Stay proactive, update your systems, and keep everything running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Published
2021-01-21T09:41Z
EPSS history
Timeline
  • 21 JAN 09:41Z
    Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute…
    cvelistv5