CVE-2020-11172

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2020-11-02

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Ipq4019 Firmware (Qualcomm)
• Ipq6018 Firmware (Qualcomm)
• Ipq8064 Firmware (Qualcomm)
• Ipq8074 Firmware (Qualcomm)
• Qca9531 Firmware (Qualcomm)
• Qca9980 Firmware (Qualcomm)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin