CVE-2020-11275

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon…

published February 22, 2021

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

⚠️ Who knew a beacon frame could spill secrets? This buffer over-read vulnerability lets attackers peek into the quiet spaces of your data! 📡 Think of it like a librarian who misreads a book's title and gives away parts of the story without checking if it's appropriate — the wrong information could be revealed without anyone noticing at first. If exploited, this issue could lead to unintended data exposure, allowing attackers to glean potentially sensitive information from the device's memory. It’s the kind of oversight that can lead to some seriously awkward conversations around the security water cooler!

Put simply

Think of it like a librarian who misreads a book's title and gives away parts of the story without checking if it's appropriate — the wrong information could be revealed without anyone noticing at first. This vulnerability arises from an improper check of the Information Element (IE) length when parsing quiet IE in received beacon frames, which can result in a buffer over-read during processing.

What to do

If exploited, this issue could lead to unintended data exposure, allowing attackers to glean potentially sensitive information from the device's memory. It’s the kind of oversight that can lead to some seriously awkward conversations around the security water cooler! To protect against this, ensure that devices running Snapdragon components are updated with the latest firmware that addresses this issue. Regularly check for patches from the manufacturer to stay secure. This is fixable! Stay vigilant and keep your systems updated. You've got this! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00834 · 57.3th percentile
Published
2021-02-22T06:26Z
EPSS history
Timeline
  • 22 FEB 06:26Z
    Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon…
    cvelistv5