{"id":"CVE-2020-11291","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11291","generatedAt":"2026-10-27T23:27:49.959Z","title":"Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute,…","description":"Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile","published":"2021-06-09T07:15:08.000Z","lastModified":"2026-06-17T02:50:02.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-129"],"affected":["qualcomm/apq8017 firmware","qualcomm/apq8053 firmware","qualcomm/aqt1000 firmware","qualcomm/csrb31024 firmware","qualcomm/msm8917 firmware","qualcomm/msm8920 firmware","qualcomm/msm8940 firmware","qualcomm/msm8953 firmware","qualcomm/msm8976 firmware","qualcomm/msm8976sg firmware","qualcomm/qca6174a firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6420 firmware","qualcomm/qca6421 firmware","qualcomm/qca6426 firmware","qualcomm/qca6430 firmware","qualcomm/qca6431 firmware","qualcomm/qca6436 firmware","qualcomm/qca6564au firmware","qualcomm/qca6574a firmware","qualcomm/qca6574au firmware","qualcomm/qca6584au firmware","qualcomm/qca6595au firmware","qualcomm/qca6696 firmware","qualcomm/qca9377 firmware","qualcomm/qca9379 firmware","qualcomm/qcm4290 firmware","qualcomm/qcm6125 firmware","qualcomm/qcs410 firmware","qualcomm/qcs4290 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/sa415m firmware","qualcomm/sa515m firmware","qualcomm/sa8155 firmware","qualcomm/sa8155p firmware","qualcomm/sc8180x\\+sdx55 firmware","qualcomm/sd 675 firmware","qualcomm/sd 8c firmware","qualcomm/sd 8cx firmware","qualcomm/sd450 firmware","qualcomm/sd480 firmware","qualcomm/sd665 firmware","qualcomm/sd670 firmware","qualcomm/sd675 firmware","qualcomm/sd678 firmware","qualcomm/sd690 5g firmware","qualcomm/sd720g firmware","qualcomm/sd730 firmware","qualcomm/sd750g firmware","qualcomm/sd765 firmware","qualcomm/sd765g firmware","qualcomm/sd768g firmware","qualcomm/sd845 firmware","qualcomm/sd855 firmware","qualcomm/sd865 5g firmware","qualcomm/sd870 firmware","qualcomm/sd888 5g firmware","qualcomm/sdx24 firmware"],"epss":{"score":0.00937,"percentile":0.60604,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.94%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11291","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}