CVE-2020-11192

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

published March 17, 2021

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds write lurks in multiple Snapdragon products! Missing a null termination check could lead to unexpected behavior in your devices! 🔥 Think of it as a restaurant that serves food without checking if the order is complete—an unaccounted ingredient could spoil the dish! The same way, this error can cause chaos in device functionality. This vulnerability could result in crashes or unpredictable behavior in devices, potentially exposing them to greater risks. Although it’s not currently exploited, the potential for future attacks is quite concerning, as attackers could use this flaw to manipulate device operations.

Put simply

Think of it as a restaurant that serves food without checking if the order is complete—an unaccounted ingredient could spoil the dish! The same way, this error can cause chaos in device functionality. The vulnerability arises from a lack of proper null termination checks while parsing SDP strings, allowing an out-of-bounds write, which can lead to memory corruption or further exploits.

What to do

This vulnerability could result in crashes or unpredictable behavior in devices, potentially exposing them to greater risks. Although it’s not currently exploited, the potential for future attacks is quite concerning, as attackers could use this flaw to manipulate device operations. If you're using affected Snapdragon products, ensure you stay updated with the latest firmware. Review your devices' documentation for patches or updates that address this issue, and monitor for any announcements from Qualcomm. 🛡️ You've got this! With a little vigilance and timely updates, you can safeguard your devices! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01099 · 65.4th percentile
Published
2021-03-17T06:00Z
EPSS history
Timeline
  • 17 MAR 06:00Z
    Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
    cvelistv5