{"id":"CVE-2020-11155","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11155","generatedAt":"2026-10-27T22:32:53.841Z","title":"u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…","description":"u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55","published":"2020-11-02T07:15:14.000Z","lastModified":"2026-06-17T02:49:17.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-120"],"affected":["qualcomm/apq8009 firmware","qualcomm/apq8053 firmware","qualcomm/qca6390 firmware","qualcomm/qcn7605 firmware","qualcomm/qcn7606 firmware","qualcomm/sa415m firmware","qualcomm/sa515m firmware","qualcomm/sa6155p firmware","qualcomm/sa8155p firmware","qualcomm/sc8180x firmware","qualcomm/sdx55 firmware"],"epss":{"score":0.00516,"percentile":0.43691,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.52%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin","tags":["Broken Link"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11155","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}