CVE-2020-11190

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon…

published March 17, 2021

CVSS
—
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer over-read might just be lurking in the shadows of your Snapdragon devices! Think of it like a restaurant serving an empty plate but claiming it’s a full meal. Without proper checks, the system could pull in unwanted data, leaving you with a half-baked experience. This vulnerability could lead to unexpected behavior or even crashes in your devices, which is definitely not ideal! While it isn't currently known to be exploited, a crafty attacker could take advantage of this oversight to read sensitive information or create instability.

Put simply

Think of it like a restaurant serving an empty plate but claiming it’s a full meal. Without proper checks, the system could pull in unwanted data, leaving you with a half-baked experience. The buffer over-read occurs during the parsing of SDP values due to the absence of NULL termination checks, affecting multiple Snapdragon platforms, from auto systems to wearables.

What to do

This vulnerability could lead to unexpected behavior or even crashes in your devices, which is definitely not ideal! While it isn't currently known to be exploited, a crafty attacker could take advantage of this oversight to read sensitive information or create instability. To address this, ensure you have the latest firmware updates from your device manufacturer. Monitoring security advisories from Snapdragon for future patches is also essential to stay ahead of any potential threats. You've got this! Stay vigilant and keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00959 · 61.1th percentile
Published
2021-03-17T06:00Z
EPSS history
Timeline
  • 17 MAR 06:00Z
    Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon…
    cvelistv5