CVE-2020-11301
High · 7.5CVSS
7.5
EPSS
11.1%
Published
Sep 8, 2021
CISA due date
—
The record
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Android | :linux_kernel:Qualcomm | SoCVersion:0 | SoCVersion:2021-10-05 |
| Android | oss/system/feeds/wlan-open | SoCVersion:0 | SoCVersion:2021-10-05 |
| Android | oss/wigig-utils | SoCVersion:0 | SoCVersion:2021-10-05 |
Related vulnerabilities
- CVE-2023-33106 Memory corruption while submitting a large list of sync points in an AUX command to the… Also affects :linux_kernel:Qualcomm
- CVE-2023-33107 Memory corruption in Graphics Linux while assigning shared virtual memory region during… Also affects :linux_kernel:Qualcomm
- CVE-2023-33063 Memory corruption in DSP Services during a remote call from HLOS to DSP. Also affects :linux_kernel:Qualcomm
- CVE-2023-33053 Memory corruption in Kernel while parsing metadata. Also affects :linux_kernel:Qualcomm
- CVE-2020-11261 Memory corruption due to improper check to return error when user application requests… Also affects :linux_kernel:Qualcomm
- CVE-2021-1905 Possible use after free due to improper handling of memory mapping of multiple processes… Also affects :linux_kernel:Qualcomm
- CVE-2021-1906 Improper handling of address deregistration on failure can lead to new GPU address… Also affects :linux_kernel:Qualcomm
- CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287